Skip to content
Threat Feed
Subscribe

Product

@Opennextjs/Cloudflare (>= 0.3.0, < 1.20.2)

1 brief RSS
high advisory

OpenNext Cloudflare Middleware Bypass via Cache Interception

The @opennextjs/cloudflare component contains a vulnerability (CVE-2026-100409) where inconsistent path decoding allows attackers to bypass middleware-based authorization and retrieve cached content.

@opennextjs/cloudflare web-application middleware-bypass cloudflare cve-2026-100409
1t 1c