Is CVE-2026-128077 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-128077 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-128077: Nuxt skip server access checks

The first fix covered one disguised path. A second form got through, and Nuxt 4.6.4 closes it.

Nuxt 2026

What WebPulse reported · 1 analysis

The first fix covered one disguised path. A second form got through, and Nuxt 4.6.4 closes it.

Related vulnerabilities

CVE-2026-114132 CVE-2026-114131 CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181