CYBER CODE RED

Get real-time updates on Telegram

P5Verified

CVE-2026-64646, CVE-2026-64647, CVE-2026-64648: Affected product not specified by the source

CVE-2026-64646, CVE-2026-64647, CVE-2026-64648 affects @next/bundle-analyzer. EPSS 0.00524 (percentile 0.42744), scored 12-Oct-2026. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6. Fixed version: 14.2.35-tuxcare.6.

CVE-2026-64646

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-64647

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2026-64648

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published

Product
@next/bundle-analyzer
CCR priority
0.1 /100 (P5)
EPSS
0.00524 · percentile 0.42851 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-64646.html