
π΄ CRITICAL
CVE-2026-44578: Unauthenticated SSRF in Next.js 14.2.35 – Will Never Be Patched
CVE-2026-44578 Nextjs 14.2.35 exposes self-hosted Next.js to unauthenticated SSRF with no patch for EOL 13.x/14.x. Applyβ¦
cve-2026-44578
devops
6 min read



