CVE-2026-94486 | Vercel Next.js up to 16.3.7 Development Server information disclosure

October 2, 2026 Yanac

A vulnerability has been found in Vercel Next.js up to 16.3.7 and classified as problematic. Impacted is an unknown function of the component Development Server. This manipulation causes information disclosure.

This vulnerability appears as CVE-2026-94486. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More