CVE-2026-75604 | vercel next.js up to 15.5.23/16.3.2 on Windows Router path traversal (GHSA-p293-qw3h-jr36)

A vulnerability was found in vercel next.js up to 15.5.23/16.3.2 on Windows. It has been declared as critical. Affected is an unknown function of the component Router. Such manipulation leads to path traversal.

This vulnerability is traded as CVE-2026-75604. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More