THREATOPS

THREAT OPS › Threat News › Next.js security advisory (AV26-851)

Next.js security advisory (AV26-851)

highcccs_caPublished 2026-08-26

<article data-history-node-id="8148" about="/en/alerts-advisories/nextjs-security-advisory-av26-851" class="cccs-threats full clearfix">

<div class="content"> <div class="layout layout--onecol"> <div class="layout__region layout__region--content">

<div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder block-extra-fie

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

https://nextjs.org/blog/august-2026-security-releaseurl

Original source: https://cyber.gc.ca/en/alerts-advisories/nextjs-security-advisory-av26-851