Identifier timeline

CVE-2026-44578

2 public sessions

Sessions

  • 2026-05-17

    CVE-2026-44578 is an immediately exploitable SSRF in Next.js's WebSocket u

  • 2026-05-15

    CVE-2026-44578 (Next.js WebSocket SSRF) has escalated to a full exploit to

Loading stance timeline

Decision Records

No public Decision Records are related to this entity yet.

Unified Search

Search the public record.