Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

766 hosts breached via CVE-2025-55182 in Next.js apps, enabling mass credential theft and targeted follow-on attacks.

Part of the PlainSec briefing for 2026-04-05

Sources

• The Hacker News
• SecurityWeek
• BleepingComputer
• Dark Reading
• Cybersecurity Dive