CVE-2026-64644— Next.js 图像优化 API 基于 SVG 拒绝服务漏洞
Possible ATT&CK Techniques 1AI
T1496 · Resource Hijacking新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-64644の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Next.js: Denial of Service in the Image Optimization API using SVGs
ソース: CVE Program / CVE List V5
脆弱性説明
Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if configured (not enabled by default). If those images contain malicious content, they can cause CPU exhaustion in /_next/image endpoints.Only config.images.remotePatterns is affected, and just the patterns in that array, whereas config.images.unoptimized: true, config.images.loader: 'custom', and Vercel are not impacted. This issue has been fixed in versions 15.5.21 and 16.2.11.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
算法复杂性
ソース: CVE Program / CVE List V5
影響を受ける製品
II. CVE-2026-64644の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-64644のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-64644 补丁与修复 (2)
CVE-2026-64644 厂商安全公告 (1)
CVE-2026-64644 厂商页面 (1)
Same Patch Batch · vercel · 2026-07-27 · 9 CVEs total
| CVE-2026-64642 | 8.3 HIGH | Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single l |
| CVE-2026-64645 | 8.3 HIGH | Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostn |
| CVE-2026-64649 | 8.3 HIGH | Next.js: Server-Side Request Forgery in Server Actions on Custom Servers |
| CVE-2026-64641 | 8.2 HIGH | Next.js: Denial of Service in App Router using Server Actions |
| CVE-2026-64643 | 6.3 MEDIUM | Next.js: Unauthenticated Disclosure of Internal Server Function endpoints |
| CVE-2026-64646 | 6.3 MEDIUM | Next.js: Unbounded Server Action payload in Edge runtime |
| CVE-2026-64647 | 6.3 MEDIUM | Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies |
| CVE-2026-64648 | 6.0 MEDIUM | Next.js: Response Body Cache Confusion for Requests Containing Bodies |
IV. 関連脆弱性
同じ製品: next.js
- CVE-2026-64649
Next.js: Server-Side Request Forgery in Server Actions on Cu - CVE-2026-64648
Next.js: Response Body Cache Confusion for Requests Containi - CVE-2026-64647
Next.js: Response Body Cache Confusion with Invalid UTF-8 Re - CVE-2026-64646
Next.js: Unbounded Server Action payload in Edge runtime - CVE-2026-64643
Next.js: Unauthenticated Disclosure of Internal Server Funct
同じベンダー: vercel
- CVE-2026-64649
Next.js: Server-Side Request Forgery in Server Actions on Cu - CVE-2026-64648
Next.js: Response Body Cache Confusion for Requests Containi - CVE-2026-64647
Next.js: Response Body Cache Confusion with Invalid UTF-8 Re - CVE-2026-64646
Next.js: Unbounded Server Action payload in Edge runtime - CVE-2026-64643
Next.js: Unauthenticated Disclosure of Internal Server Funct
同じ弱点: CWE-407
- CVE-2026-55968
Apache Thrift: Node.js quadratic-time DoS in server receive - CVE-2026-65623
Quadratic CPU blow-up reassembling fragmented WebSocket mess - CVE-2026-13064
MongoDB $jsonSchema Query Operator Excessive CPU Consumption - CVE-2026-57480
Parse Server: Denial of service via exponential-time process - CVE-2026-55206
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
V. CVE-2026-64644へのコメント
まだコメントはありません