Posted inMicrosoft Teams
Posted inCloudflare
WAF – WAF Release – 2026-08-26 – Emergency
This emergency release updates an existing Next.js remote code execution rule to identify CVE-2026-75604 and adds a new rule for remote code execution in the Next.js Image Optimizer via crafted AVIF images. Key Findings CVE-2026-75604 affects Windows-hosted Next.js applications using…















