Next.js security advisory (AV26-851)

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>
        <div><p><strong>Serial Number: </strong>AV26-851<br /><strong>Date: </strong>August&nbsp;26, 2026</p>

As of August 25, 2026, Next.js is affected by critical vulnerabilities in the following product:

  • js
    • Version 15.5 prior to 15.5.24
    • Version 16.3 prior to 16.3.3

The Cyber Centre encourages users and administrators to review the web link provided and apply any necessary updates as they become available.

</div>

Article Link: Next.js security advisory (AV26-851) - Canadian Centre for Cyber Security