CVE-2025-29927 (Next.js Middleware Authorization Bypass) 1 Next.js Middleware Authorization Bypass (CVE-2025-29927) | BugVault Jun 1, 2026