Critical 9.5
CVE-2026-94545
Next.js Remote Code Execution Vulnerability CVE-2026-94545
Vendor / product: Next.js
Event date: 2026-09-02
Public PoC: No
First tracked by RiskWire: 2026-09-24
Sources & citations (1)
- Critical NEXT.JS Flaw Enables RCE Attacks Via Weaponized SVG File cybersecuritynews.com · 2026-09-23
References
See CVE-2026-94545 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →