CTI · reviewed · 2026-09-30

Vercel fixed a critical Next.js RCE vulnerability in image generation. Update to patch this Next.js RCE vulnerability and secure your apps.

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://nextjs.org/blog/nextjs-security-update-september-22-2026
• https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j
• https://github.com/vercel/satori/security/advisories/GHSA-wx4j-mvgx-mqwp
• https://socprime.com/blog/cve-2026-94545-analysis/