V
Vendor security profile1 actively exploited CVEs
vercel
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical2
CISA KEV1
Public exploit7
Patch rate%61
Avg. CVSS6.6
12-month vulnerability rate
1
4
0
0
0
0
7
0
9
0
2
8
CVE KEV
CVE severity distribution
31toplam CVE
Critical2 (6%)
High11 (35%)
Medium17 (55%)
Low1 (3%)
Patch and exploitation view
%61
Verified patch
%3
CISA KEV
%23
Public exploit
19Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
4.9
CVE-2026-109375
Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction
V
Patch verifiedEPSS %0
6.3
CVE-2026-94484
Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
V
Patch verifiedEPSS %0
6.3
CVE-2026-94485
Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
V
Patch verifiedEPSS %0
8.3
CVE-2026-94483
Next.js: Server-Side Request Forgery in Image Optimization
V
Patch verifiedEPSS %0
6.3
CVE-2026-94543
Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
V
Patch verifiedEPSS %0
6.3
CVE-2026-94544
Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
V
Patch verifiedEPSS %0
2.3
CVE-2026-94486
Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint
V
Patch verifiedEPSS %0
6.3
CVE-2026-103004
next.js cache leak on warm `use cache` handlers accessing root param
V
Patch status unknownEPSS %0
5.3
CVE-2026-94545
Satori-generated SVG has improper escaping
V
Patch status unknownEPSS %1
9.0
CVE-2026-75604
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
V
Patch verifiedEPSS %2