CVE-2026-94483 | Vercel Next.js up to 16.3.7 Image Optimization server-side request forgery

October 2, 2026 Yanac

A vulnerability, which was classified as critical, was found in Vercel Next.js up to 16.3.7. This issue affects some unknown processing of the component Image Optimization. The manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2026-94483. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More