Threats Tagged 'cve-2026-64643'
View all threats tagged with 'cve-2026-64643'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-64643'
Click on any threat for detailed analysis and mitigation recommendations
Next.js: Unauthenticated disclosure of internal Server Function endpoints (CVE-2026-64643)CVE-2026-64643 0 Next.js applications using the App Router with Server Actions (`use server`) or `use cache` endpoints may inadvertently disclose internal server function endpoints to unauthenticated users. This occurs because Server Action IDs can be exposed through publicly served client artifacts, such as static chunks containing action references. While this disclosure alone is primarily a reconnaissance or enumeration issue, it can increase risk if combined with other vulnerabilities. The issue affects specific Next.js versions and requires developers to enforce authentication within server boundaries. Join the discussion | GCVE Database | 07/22/2026, 23:00:34 UTC Added: 07/23/2026, 01:18:05 UTC |
Showing 1 to 1 of 1 result