WID-SEC-W-2026-3973

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Vercel Next.js: Mehrere Schwachstellen

view advisory published 2026-10-14

Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-96889UShigh7.8Exploit
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan