Security News Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE TheHackerNews Daniel Bender 27 Aug 2026 Share Next.js patches two critical unauthenticated RCE flaws affecting Windows deployments and sites with AVIF optimization enabled.
