Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-114139

1 brief RSS
critical advisory

Sentry-Javascript: Middleware bypass via tunnelRoute (CVE-2026-114139)

A middleware bypass vulnerability in the @sentry/nextjs SDK allows unauthenticated access to routes if the configured tunnel path overlaps with application routes in Webpack-based builds.

@sentry/nextjs +2 web-application middleware-bypass cve-2026-114139
1t 1c