V
Vendor security profile1 actively exploited CVEs
vercel
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs30
Critical2
CISA KEV1
Public exploit4
Patch rate%60
Avg. CVSS6.7
12-month vulnerability rate
1
4
0
0
0
0
7
0
9
0
2
7
CVE KEV
CVE severity distribution
30toplam CVE
Critical2 (7%)
High11 (37%)
Medium16 (53%)
Low1 (3%)
Patch and exploitation view
%60
Verified patch
%3
CISA KEV
%13
Public exploit
18Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
6.3
CVE-2026-94484
Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
V
Patch verifiedEPSS %0
6.3
CVE-2026-94485
Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
V
Patch verifiedEPSS %0
8.3
CVE-2026-94483
Next.js: Server-Side Request Forgery in Image Optimization
V
Patch verifiedEPSS %0
6.3
CVE-2026-94543
Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
V
Patch verifiedEPSS %0
6.3
CVE-2026-94544
Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
V
Patch verifiedEPSS %0
2.3
CVE-2026-94486
Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint
V
Patch verifiedEPSS %0
6.3
CVE-2026-103004
next.js cache leak on warm `use cache` handlers accessing root param
V
Patch status unknownEPSS %0
5.3
CVE-2026-94545
Satori-generated SVG has improper escaping
V
Patch status unknownEPSS %1
9.0
CVE-2026-75604
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
V
Patch verifiedEPSS %2
6.5
CVE-2026-64649
Server-side request forgery in Vercel Next.js
V
Patch verifiedEPSS %0