37846

React Server Components Just Got an Unauthenticated RCE: Breaking Down CVE-2026-126187

CVE-2026-126187 is a 9.5 CVSS unauthenticated RCE in React Server Components. See how a detached buffer and forged thenable break Next.js Cache Components