| CVE-2026-94482 |
Next.js is a React framework for building full-stack web applications
|
8.2
High
|
Oct 22, 2026 |
| CVE-2026-94484 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Oct 2, 2026 |
| CVE-2026-94485 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Oct 2, 2026 |
| CVE-2026-94483 |
Next.js is a React framework for building full-stack web applications
|
8.3
High
|
Oct 2, 2026 |
| CVE-2026-94543 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Oct 2, 2026 |
| CVE-2026-94544 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Oct 2, 2026 |
| CVE-2026-94486 |
Next.js is a React framework for building full-stack web applications
|
2.3
Low
|
Oct 2, 2026 |
| CVE-2026-103004 |
Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return…
|
6.3
Medium
|
Oct 1, 2026 |
| CVE-2026-75604 |
Next.js is a React framework for building full-stack web applications
|
9.0
Critical
|
Sep 1, 2026 |
| CVE-2026-64649 |
Next.js is a React framework for building full-stack web applications
|
8.3
High
|
Jul 27, 2026 |
| CVE-2026-64648 |
Next.js is a React framework for building full-stack web applications
|
6.0
Medium
|
Jul 27, 2026 |
| CVE-2026-64647 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Jul 27, 2026 |
| CVE-2026-64646 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Jul 27, 2026 |
| CVE-2026-64644 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Jul 27, 2026 |
| CVE-2026-64643 |
Next.js is a React framework for building full-stack web applications
|
6.3
Medium
|
Jul 27, 2026 |
| CVE-2026-64642 |
Next.js is a React framework for building full-stack web applications
|
8.3
High
|
Jul 27, 2026 |
| CVE-2026-64641 |
Next.js is a React framework for building full-stack web applications
|
8.2
High
|
Jul 27, 2026 |
| CVE-2026-64645 |
Next.js is a React framework for building full-stack web applications
|
8.3
High
|
Jul 27, 2026 |
| CVE-2026-45109 |
Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
|
7.5
High
|
May 13, 2026 |
| CVE-2026-44582 |
Next.js is a React framework for building full-stack web applications
|
3.7
Low
|
May 13, 2026 |
| CVE-2026-44581 |
Next.js is a React framework for building full-stack web applications
|
4.7
Medium
|
May 13, 2026 |
| CVE-2026-44580 |
Next.js is a React framework for building full-stack web applications
|
6.1
Medium
|
May 13, 2026 |
| CVE-2026-44579 |
Next.js is a React framework for building full-stack web applications
|
7.5
High
|
May 13, 2026 |
| CVE-2026-44578 |
Next.js is a React framework for building full-stack web applications
|
8.6
High
|
May 13, 2026 |
| CVE-2026-44577 |
Next.js is a React framework for building full-stack web applications
|
5.9
Medium
|
May 13, 2026 |