CVE-2026-64644 | Vercel Next.js up to 15.5.20/16.2.10 Image Optimization API /_next/image resource consumption

July 27, 2026 Yanac

A vulnerability classified as problematic was found in Vercel Next.js up to 15.5.20/16.2.10. This issue affects some unknown processing of the file /_next/image of the component Image Optimization API. Executing a manipulation can lead to resource consumption.

This vulnerability is registered as CVE-2026-64644. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More