Skip to content
Threat Feed
Subscribe

Vendor

OpenNext

1 brief RSS
high advisory

OpenNext Cloudflare Middleware Bypass via Cache Interception

The @opennextjs/cloudflare component contains a vulnerability (CVE-2026-100409) where inconsistent path decoding allows attackers to bypass middleware-based authorization and retrieve cached content.

@opennextjs/cloudflare web-application middleware-bypass cloudflare cve-2026-100409
1t 1c