Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：346419）

Rule General Information


Release Date:		2026-10-12

Rule Name:		Vercel Next.js Windows Incremental Cache Path Traversal Vulnerability (CVE-2026-75604)

Severity:

CVE ID:

Rule Protection Details


Description:		Vercel Next.js is an open-source web application framework developed by Vercel that supports server-side rendering and static generation. Vercel Next.js versions 13.4.0 up to but not including 15.5.24, and versions 16.0.0 up to but not including 16.3.3, contain a path traversal vulnerability. This vulnerability arises from improperly escaping backslashes in route segments when constructing incremental cache paths on Windows servers (involving the escape-path-delimiters.ts and file-system-cache.ts files), allowing remote requests to traverse outside the intended cache root directory via encoded Windows path separators, exposing private build data (including server reference manifest encryption keys), which may in turn lead to remote code execution.

Impact:		An attacker could exploit this vulnerability to have unspecified effect.

Affected OS:		Windows

Reference:		https://github.com/vercel/next.js/commit/968b9fcb26bdeb8e0a861a9df05361474666d51b https://github.com/vercel/next.js/commit/b0f3460a92b955d3ca41fccff9a525a2b910fbf3 https://github.com/vercel/next.js/releases/tag/v16.3.3 https://github.com/vercel/next.js/security/advisories/GHSA-p293-qw3h-jr36 https://github.com/vercel/next.js/releases/tag/v15.5.24

Solutions

Refer to the announcement or patch by the vendor.