CVE-2026-75604 | vercel next.js up to 15.5.23/16.3.2 on Windows Router path traversal (GHSA-p293-qw3h-jr36 / Nessus ID 342568)

A vulnerability was found in vercel next.js up to 15.5.23/16.3.2 on Windows. It has been declared as critical. Affected is an unknown function of the component Router. Such manipulation leads to path traversal. This vulnerability is traded as CVE-2026-75604. The attack may be launched remotely. There is no exploit available. It is recommended to...