{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.982Z","products":["vercel"],"actNowTotal":0,"results":[{"query":"vercel","matched":1,"actNow":0,"events":[{"id":"early-cve-2025-29927","url":"https://securitythreatpulse.com/events/early-cve-2025-29927","title":"Vercel Next.js: attackers can gain admin rights","verdict":"watch","verdictReason":"Attack attempts are confirmed, with no confirmed exploitation yet.","tier":null,"rankScore":2,"rankWhy":["Ready-made attack tools are public.","The first report is 20 days old."],"rulesVersion":"v3","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"none"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2025-29927"],"vendor":"vercel","product":"next.js","affectedProducts":[{"kind":"direct","slug":"vercel/nextjs","vendor":"Vercel","product":"Next.js","evidence":["cna","cpe"],"vendorKey":"vercel","productKey":"nextjs"}],"category":{"id":"website","label":"Website or online store","why":"It runs public websites, online stores or the software behind them.","doThis":"Ask whoever runs your website or store to update it."},"summary":"Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.","cvss":9.1,"epss":0.99225,"exploitMaturity":"weaponized","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-10-22T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-11-06T20:05:42.000Z"}]}]}