CVE-2026-55685

React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response times. This issue is a follow up to CVE-2026-42342, and does not does not impact React Router applications using Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>). This issue has been fixed in version 7.18.0.

• CWE-400
• CWE-407

• https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180Release Notes
• https://github.com/remix-run/react-router/commit/09e6020d1950e54f361f7ad00938ecd4dde60929Patch
• https://github.com/remix-run/react-router/pull/15186Issue Tracking, Patch
• https://github.com/remix-run/react-router/releases/tag/react-router@7.18.0Release Notes
• https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78Third Party Advisory
• https://github.com/remix-run/react-router/security/advisories/GHSA-chx6-hx7r-mcp5Third Party Advisory

Published

Jul 27, 2026

Last Modified

Aug 3, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55670ZITADEL is an open source identity management platform. Prio…2.3
• CVE-2026-55671ZITADEL is an open source identity management platform. From…2.3
• CVE-2026-55672ZITADEL is an open source identity management platform. Prio…7.4
• CVE-2026-55676Malcolm is a network traffic analysis tool suite. The file-u…8.8
• CVE-2026-55677Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo'…7.5
• CVE-2026-5568A vulnerability has been found in Akaunting up to 3.1.21. Th…3.5
• CVE-2026-55686Podman is a tool for managing OCI containers and pods. From …5.3
• CVE-2026-55687ESF-IDF is the Espressif Internet of Things (IOT) Developmen…7.5
• CVE-2026-55688The AsyncHttpClient (AHC) library allows Java applications t…4
• CVE-2026-55689OpenFGA is an authorization/permission engine built for deve…8.1
• CVE-2026-5569A vulnerability was found in Technostrobe HI-LED-WR120-G2 5.…9.8
• CVE-2026-55693Vim is an open source, command line text editor. Prior to 9.…7.8