File and Path Handling

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Next.js: Unauthenticated Remote Code Execution on windows-hosted serversCVE-2026-75604vercel · CVSS 9 · 2.1% likelycovered by CyberSIXT

   CWE-221 article

2. Turborepo: Unexpected local code execution during Yarn Berry detectionCVE-2026-45772vercel · CVSS 0 · 0.4% likely

   CWE-426

3. Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball ExtractionCVE-2026-109375Vercel · CVSS 6.1 · 0.3% likely

   CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.