CYBER CODE RED

Get real-time updates on Telegram

P5Verified

CVE-2026-44574, CVE-2026-44575, CVE-2026-44576 +6 more CVEs: Affected product not specified by the source

CVE-2026-44574, CVE-2026-44575, CVE-2026-44576, CVE-2026-44577, CVE-2026-44578, CVE-2026-44579, CVE-2026-44580, CVE-2026-44581, CVE-2026-44582 affects @next/bundle-analyzer. EPSS 0.00667 (percentile 0.50482), scored 12-Oct-2026. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7. Fixed version: 16.0.6-tuxcare.7.

CVE-2026-44574

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44575

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44576

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44577

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44578

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44579

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44580

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44581

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-44582

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published

CVE
CVE-2026-44577, CVE-2026-44578, CVE-2026-44579, CVE-2026-44580, CVE-2026-44581, CVE-2026-44582
Product
@next/bundle-analyzer
CCR priority
0.2 /100 (P5)
EPSS
0.00667 · percentile 0.50558 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-44574.html