CVEs for Vercel
84 matching vulnerabilities, 1 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-94482 Next.js: Denial of Service in App Router using Server Actions
CVSS 8.2 highEPSS 0.37%Vercel
CVE-2026-94483 Next.js: Server-Side Request Forgery in Image Optimization
CVSS 6.5 mediumEPSS 0.33%Vercel
CVE-2026-94543 Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
CVSS 5.3 mediumEPSS 0.51%Vercel
CVE-2026-103004 next.js cache leak on warm `use cache` handlers accessing root param
CVSS 5.3 mediumEPSS 0.25%Vercel
CVE-2026-94545 Satori-generated SVG has improper escaping
CVSS 5.3 mediumEPSS 1.1%Vercel
CVE-2026-75604 Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
CVSS 9.0 criticalEPSS 2.1%Vercel
CVE-2026-64649 Next.js: Server-Side Request Forgery in Server Actions on Custom Servers
CVSS 6.5 mediumEPSS 0.46%Vercel
CVE-2026-64648 Next.js: Response Body Cache Confusion for Requests Containing Bodies
CVSS 5.4 mediumEPSS 0.34%Vercel
CVE-2026-64647 Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies
CVSS 5.4 mediumEPSS 0.32%Vercel
CVE-2026-64646 Next.js: Unbounded Server Action payload in Edge runtime
CVSS 5.3 mediumEPSS 0.52%Vercel
CVE-2026-64644 Next.js: Denial of Service in the Image Optimization API using SVGs
CVSS 5.3 mediumEPSS 0.67%Vercel
CVE-2026-64643 Next.js: Unauthenticated Disclosure of Internal Server Function endpoints
CVSS 5.3 mediumEPSS 0.51%Vercel
CVE-2026-64641 Next.js: Denial of Service in App Router using Server Actions
CVSS 7.5 highEPSS 0.86%Vercel
CVE-2026-64650 AI SDK Codex Harness Tool Relay Authorization Bypass
CVSS 6.3 mediumEPSS 0.17%Vercel
CVE-2026-64651 AI SDK OpenCode Harness Tool Relay Authorization Bypass
CVSS 6.3 mediumEPSS 0.17%Vercel
CVE-2026-45773 Turborepo: Login callback CSRF/session fixation
CVSS 6.5 mediumEPSS 0.12%Vercel
CVE-2026-46508 Turborepo: VSCode Extension command injection
CVSS 7.8 highEPSS 0.16%Vercel
CVE-2026-45772 Turborepo: Unexpected local code execution during Yarn Berry detection
CVSS 9.8 criticalEPSS 0.39%Vercel
CVE-2026-44581 Next.js: Cross-site scripting in App Router applications using CSP nonces
CVSS 4.7 mediumEPSS 0.22%Vercel
CVE-2026-44580 Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input
CVSS 6.1 mediumEPSS 0.21%Vercel
CVE-2026-44577 Next.js: Denial of Service in the Image Optimization API
CVSS 5.9 mediumEPSS 0.74%Vercel
CVE-2026-44576 Next.js: Cache poisoning in React Server Component responses
CVSS 5.4 mediumEPSS 0.30%Vercel
CVE-2026-44574 Next.js: Middleware / Proxy bypass through dynamic route parameter injection
CVSS 8.1 highEPSS 0.64%Vercel
CVE-2026-44573 Next.js: Middleware / Proxy bypass in Pages Router applications using i18n
CVSS 7.5 highEPSS 0.80%Vercel
CVE-2026-44572 Next.js: Middleware / Proxy redirects can be cache-poisoned
CVSS 3.7 lowEPSS 0.28%Vercel
CVE-2026-44479 Vercel: Non-interactive mode includes CLI arguments in suggested command output
CVSS 5.5 mediumEPSS 0.16%Vercel
CVE-2026-29057 Next.js: HTTP request smuggling in rewrites
CVSS 6.5 mediumEPSS 0.45%Vercel
CVE-2026-27980 Next.js: Unbounded next/image disk cache growth can exhaust storage
CVSS 7.5 highEPSS 0.71%Vercel
CVE-2026-27979 Next.js: Unbounded postponed resume buffering can lead to DoS
CVSS 7.5 highEPSS 0.69%Vercel
CVE-2026-27978 Next.js: null origin can bypass Server Actions CSRF checks
CVSS 4.3 mediumEPSS 0.21%Vercel
CVE-2026-27977 Next.js: null origin can bypass dev HMR websocket CSRF checks
CVSS 5.4 mediumEPSS 0.18%Vercel
CVSS 5.9 mediumEPSS 0.43%Vercel
CVSS 5.9 mediumEPSS 0.49%Vercel
CVSS 7.5 highEPSS 20.0%Vercel
CVSS 7.5 highEPSS 66.6%Vercel
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)