{"vulnerability": "cve-2026-94545", "sightings": [{"uuid": "290f075a-080b-4f90-8e73-36557029a416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mw6iine23k2e", "content": "A critical vulnerability (CVE-2026-94545, CVSS 9.5) in Next.js versions 16.2.0 through 16.3.5 allows remote code execution via the ImageResponse feature [\u2026]", "creation_timestamp": "2026-09-23T10:04:52.962608Z"}, {"uuid": "ca5026d0-5647-4019-a0e0-2106980ca08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mw7oos2rfw2s", "content": "\ud83d\udea8 CVE-2026-94545: Critical RCE in Next.js 16.2.0\u201316.3.5 via SVG injection when attacker-controlled input reaches ImageResponse. Next.js 15 and Edge ImageResponse are unaffected.\n\ud83d\udc49 Update to 16.3.6.\nDetails: buff.ly/74eZfz1", "creation_timestamp": "2026-09-23T21:28:21.016035Z"}, {"uuid": "b11145c5-8c19-4213-a972-749b26123583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwaa7kbv5s2t", "content": "Your link preview just got a day job, Morty. Next.js ImageResponse on Node (CVE-2026-94545, CVSS 9.5) can launder a URL into SVG, then into server shell via Satori. Patch is 16.3.6. Edge version shrugs. Even the thumbnail freelances now. day267.012", "creation_timestamp": "2026-09-24T02:41:58.651078Z"}, {"uuid": "d0361730-a208-49db-b567-93c4a930e1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwabvl6f5o2n", "content": "Next.js RCE Vulnerability CVE-2026-94545: Critical ImageResponse Flaw Enables Remote Code Execution\uff08Next.js\u306b\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001ImageResponse\u3078\u306e\u7d30\u5de5\u3055\u308c\u305fSVG\u5165\u529b\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\uff09 #SecurityOnline (Sep 23)\n\nsecurityonline.info/nextjs-rce-v...", "creation_timestamp": "2026-09-24T03:12:09.299235Z"}, {"uuid": "a8e9a02e-80b0-4589-875e-675e2740645a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/thehackernews/10135", "content": "\u203c\ufe0f Next.js patched a critical ImageResponse flaw that can lead to server code execution.\n\n\"CVE-2026-94545\" affects 16.2.0 through 16.3.5 on Node.js when attacker-controlled values reach generated SVG. The fix is 16.3.6.\n\nInside the bug: https://thehackernews.com/2026/09/critical-nextjs-imageresponse-flaw-can.html", "creation_timestamp": "2026-09-23T07:12:34.000000Z"}, {"uuid": "adf85058-ea12-44f4-8094-7a5d1e410ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/CyberDispatch/3069", "content": "Next.js patched a critical ImageResponse flaw that can lead to server code execution.\n\n\"CVE-2026-94545\" affects 16.2.0 through 16.3.5 on Node.js when attacker-controlled values reach generated SVG. The fix is 16.3.6.", "creation_timestamp": "2026-09-24T06:26:15.000000Z"}, {"uuid": "58794f51-4aea-43bf-91b7-c26428d0c840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/GithubRedTeam/103144", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545-nextjs-og-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-23 14:52:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94545 / GHSA-vcvr-r3jv-pc5j \u2014 Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-23T15:06:05.000000Z"}, {"uuid": "37bc78d4-8345-4a45-9553-78dceb648195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103144", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545-nextjs-og-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-23 14:52:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94545 / GHSA-vcvr-r3jv-pc5j \u2014 Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-23T15:06:05.000000Z"}, {"uuid": "45b2d05d-de57-41ad-a193-d96ae6431e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/casOb_urBwXkBUZvllR9Y1soseAr2u2g5tENUUxRQxBEAPw", "content": "", "creation_timestamp": "2026-09-24T03:00:06.000000Z"}, {"uuid": "faa77273-1402-48bd-9135-8a198048e789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/3LdrFlR-LEY1MNMAeK2_oak7FbRFWnHvSLklHTRJ1hQ0h1g", "content": "", "creation_timestamp": "2026-09-23T11:00:12.000000Z"}, {"uuid": "ecfc1d21-8290-47ef-a417-48dc0865a7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/vqsPZgWgWmhUgO5aL_wpY6AtnbvKlpjOuzz_MF4q41HEYi4", "content": "", "creation_timestamp": "2026-09-23T15:00:06.000000Z"}, {"uuid": "ed53f3ae-e3b6-4e27-908d-def674bb751c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/bdufstecru/3480", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 ImageResponse \u043f\u0430\u043a\u0435\u0442\u0430 next/og \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Next.js \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-15201\nCVE-2026-94545\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/vercel/satori/commit/26a52affc", "creation_timestamp": "2026-09-25T13:52:47.000000Z"}, {"uuid": "12a5129a-4576-45a5-8bf5-839b256e78d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3480", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 ImageResponse \u043f\u0430\u043a\u0435\u0442\u0430 next/og \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Next.js \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-15201\nCVE-2026-94545\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/vercel/satori/commit/26a52affc", "creation_timestamp": "2026-09-25T13:52:47.000000Z"}, {"uuid": "4e375ea8-f94e-4874-9fe1-a8930fc04383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "exploited", "source": "Telegram/3LdrFlR-LEY1MNMAeK2_oak7FbRFWnHvSLklHTRJ1hQ0h1g", "content": "", "creation_timestamp": "2026-09-23T11:00:12.000000Z"}, {"uuid": "8195b5eb-55fd-48b6-9de8-44d1e76f3f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "Telegram/vqsPZgWgWmhUgO5aL_wpY6AtnbvKlpjOuzz_MF4q41HEYi4", "content": "", "creation_timestamp": "2026-09-23T15:00:06.000000Z"}, {"uuid": "4ff84c85-338c-4bc6-982a-e37ef5c988ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/ViralCyber/26355", "content": "\ud83d\udd34\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 Next.js \u0628\u0627 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE)\n\u25c0\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-94545 \u0628\u0627 \u0634\u062f\u062a \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 \u0642\u0627\u0628\u0644\u06cc\u062a ImageResponse \u0627\u0632 \u067e\u06a9\u06cc\u062c next/og \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062a\u0632\u0631\u06cc\u0642 \u0645\u062d\u062a\u0648\u0627\u06cc \u0645\u062e\u0631\u0628 SVG \u062f\u0631 \u0641\u0631\u0627\u06cc\u0646\u062f \u062a\u0648\u0644\u06cc\u062f \u062a\u0635\u0627\u0648\u06cc\u0631 \u067e\u0648\u06cc\u0627\u060c \u062a\u062d\u062a \u0634\u0631\u0627\u06cc\u0637 \u0645\u0634\u062e\u0635\u060c \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f. \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 16.2.0 \u062a\u0627 \u067e\u06cc\u0634 \u0627\u0632 16.3.6 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f.\n\n\u2b05\ufe0f\u0627\u0642\u062f\u0627\u0645 \u0636\u0631\u0648\u0631\u06cc: \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u062a\u06cc\u0645\u200c\u0647\u0627\u06cc \u062a\u0648\u0633\u0639\u0647 \u0648 \u0627\u0645\u0646\u06cc\u062a\u060c \u0636\u0645\u0646 \u0627\u0631\u062a\u0642\u0627\u06cc Next.js \u0628\u0647 \u0646\u0633\u062e\u0647 16.3.6 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631\u060c \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u067e\u0631\u062f\u0627\u0632\u0634 SVG \u0648 \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0642\u0627\u0628\u0644\u200c\u0627\u0639\u062a\u0645\u0627\u062f \u062f\u0631 \u062a\u0648\u0644\u06cc\u062f \u062a\u0635\u0627\u0648\u06cc\u0631 Open Graph \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0644\u0627\u06af\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0631\u0627 \u0627\u0632 \u0646\u0638\u0631 \u062a\u0644\u0627\u0634\u200c\u0647\u0627\u06cc \u0627\u062d\u062a\u0645\u0627\u0644\u06cc \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u067e\u0627\u06cc\u0634 \u06a9\u0646\u0646\u062f.\n\n#NextJS #RCE #CyberSecurity #CVE\n\n\ud83d\udcf1 @PingChannel \n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f\ud83c\udd70\ufe0f", "creation_timestamp": "2026-09-25T12:20:39.000000Z"}, {"uuid": "47513fde-aa76-4dc6-b211-e9f213acbdf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1828", "content": "\ud83d\udd25 \u0401\u0411\u0410\u041d\u042b\u0419 SVG: \u043e\u0434\u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0430 \u2014 \u0438 Next.js \u043e\u0442\u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435!\n\n\u0412 Next.js \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 next/og \u0438 ImageResponse. \u0415\u0441\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 URL \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 \u0432 SVG-\u043a\u043e\u043d\u0442\u0435\u043d\u0442, \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u0438\u043b\u0438 \u0441\u0442\u0438\u043b\u0438, \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Node.js-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435.\n\n\ud83d\ude31 \u0412 \u0447\u0451\u043c \u043f\u0440\u0438\u043a\u043e\u043b?\n\nImageResponse \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 JSX \u0432 SVG \u0447\u0435\u0440\u0435\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 Satori, \u0430 \u0437\u0430\u0442\u0435\u043c \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u0442 \u0435\u0433\u043e \u0432 PNG. \u0418\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043c\u043e\u0433\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c SVG-\u0440\u0430\u0437\u043c\u0435\u0442\u043a\u0438, \u0430 \u043d\u0435 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442.\n\n\ud83d\udca5 \u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a\u0438:\n\n\u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 OG-route \u2192 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u2192 SVG injection \u2192 Satori/ImageResponse \u2192 image-processing pipeline \u2192 JavaScript \u0432 Node.js \u2192 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421\n\n\ud83d\udea8 \u0427\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439?\n\n\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a .env, API-\u043a\u043b\u044e\u0447\u0430\u043c \u0438 \u0442\u043e\u043a\u0435\u043d\u0430\u043c;\n\u2014 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445;\n\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c;\n\u2014 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e;\n\u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 Node.js-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b:\n\n\u2014 Next.js >=16.2.0 \u0438 <16.3.6;\n\u2014 Node.js-\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f ImageResponse;\n\u2014 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0433\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0432 SVG.\n\nEdge-\u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f ImageResponse \u044d\u0442\u0438\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0430. \u0412\u0435\u0442\u043a\u0430 Next.js 15 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u043c\u0443 RCE, \u043d\u043e \u0432\u0435\u0440\u0441\u0438\u044f 15.5.26 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 security hardening.\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Next.js \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e 16.3.6.\n\n2\ufe0f\u20e3 \u041f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u0442\u044c production artifact \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0442\u0430\u0440\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b.\n\n3\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c ImageResponse, opengraph-image, twitter-image \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b /api/og.\n\n4\ufe0f\u20e3 \u0423\u0431\u0440\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0438\u0437 SVG content, attributes \u0438 styles.\n\n5\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 Satori, \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a OG-route \u0438 \u0434\u043e\u0447\u0435\u0440\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 node.\n\n\ud83d\udd17 \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u0435: https://eh.su/reports/cve-2026-94545-remote-code-execution-v-next-js-next-og-cherez-imageresponse-i-svg-injection\n\n#NextJS #CVE202694545 #RCE #SVG #ImageResponse #Satori #NodeJS #AppSec #CyberSecurity", "creation_timestamp": "2026-09-26T18:13:37.000000Z"}, {"uuid": "ff404eb0-0efe-4961-bf31-96c7f8ca5ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/GithubRedTeam/103731", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 07:58:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNext.js RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T08:00:08.000000Z"}, {"uuid": "37c5a0a0-b87d-4c9e-b31d-8deed7491098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103731", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-29 07:58:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNext.js RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-29T08:00:08.000000Z"}, {"uuid": "7bc00fb8-f8e0-4eb7-ad98-59b5d56a99f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103831", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mhtsec\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 05:53:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNext.js next/og unauthenticated RCE (CVE-2026-94545) - PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T06:00:07.000000Z"}, {"uuid": "e96f9940-2708-4eaa-aa26-15703cd5cb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://www.acn.gov.it/portale/w/next.js-poc-pubblico-per-lo-sfruttamento-della-cve-2026-94545", "content": "", "creation_timestamp": "2026-09-30T04:45:28.000000Z"}, {"uuid": "c1893cc5-893f-4c93-a031-0099e4624dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://www.acn.gov.it/portale/w/next.js-poc-pubblico-per-lo-sfruttamento-della-cve-2026-94545", "content": "Disponibile Proof of Concept (PoC) per lo sfruttamento della vulnerabilit\u00e0 CVE-2026-94545 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in next/og ImageResponse di Next.js. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato remoto, in determinate condizioni, di eseguire codice arbitrario sui sistemi interessati.", "creation_timestamp": "2026-09-30T09:45:28.000000Z"}, {"uuid": "0154a912-c69a-41a2-8e81-da68bcbff174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://gist.github.com/alon710/e11ed57bbd03f583eda1d234a9d2ec4e", "content": "# GHSA-VCVR-R3JV-PC5J: CVE-2026-94545: SVG-Serialization Markup Injection in Vercel Satori and Next.js ImageResponse\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-30\n> **Full Report:** https://cvereports.com/reports/GHSA-VCVR-R3JV-PC5J\n\n## Summary\nAn improper output encoding and escaping vulnerability (CWE-116) in Vercel Satori allows unauthenticated remote attackers to perform markup injection in dynamic Open Graph images generated via Next.js's ImageResponse. Unsanitized parameter interpolation into SVG elements breaks XML structural boundaries. This exposes downstream parsing, rasterization, and rendering pipelines to Server-Side Request Forgery (SSRF), Local File Read, and Remote Code Execution (RCE).\n\n## TL;DR\nUnsanitized user inputs passed to the Next.js `ImageResponse` wrapper are processed by the underlying Satori library without appropriate HTML/XML escaping. This allows attackers to break out of XML tag boundaries, inject arbitrary SVG nodes, and trigger downstream vulnerabilities in image-processing backends.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-116 (Improper Encoding or Escaping of Output)\n- **Attack Vector**: Network (AV:N) / Unauthenticated Remote HTTP Request\n- **CVSS v4.0 Score**: 9.8 (Critical Framework-Level Impact)\n- **EPSS Score**: Not Available\n- **Exploit Status**: Proof-of-Concept (PoC) documented and verified via rendering side-channel\n- **CISA KEV Status**: No (Not currently listed in the CISA KEV catalog)\n- **Mitigation Strategy**: Update Next.js or enforce strict input escaping and Edge runtime configurations\n\n## Affected Systems\n\n- Next.js Node.js-runtime dynamic Open Graph image generation pipelines\n- Serverless functions executing next/og ImageResponse APIs\n- Custom Node.js applications consuming standalone Vercel Satori packages for HTML/CSS-to-SVG conversion\n- **Next.js**: >= 16.2.0, < 16.3.6 (Fixed in: `16.3.6`)\n- **Satori**: >= 0.0.27, < 0.33.5 (Fixed in: `0.33.5`)\n\n## Mitigation\n\n- Upgrade Next.js dependencies to version 16.3.6 or higher (or backported version 15.5.26)\n- Upgrade standalone Vercel Satori packages to version 0.33.5 or higher\n- Configure dynamic ImageResponse routes to execute inside the Edge Runtime\n- Implement a strict string-sanitization middleware to escape XML entities in input parameters before rendering\n\n**Remediation Steps:**\n1. Identify all API and dynamic page files utilizing 'next/og' or direct Satori rendering\n2. Run 'npm install next@16.3.6' or 'yarn add next@16.3.6' to pull the patched dependency bundle\n3. Validate the package-lock.json or yarn.lock file to ensure Satori is resolved to 0.33.5 or higher\n4. If packages cannot be updated, implement the 'sanitizeForSVG' helper on all dynamic parameters\n5. Add 'export const runtime = \"edge\"' to the top of dynamic OG image generation routes\n6. Deploy the updated application and perform a non-destructive side-channel verification scan to ensure input parameters are properly escaped\n\n## References\n\n- [Next.js Security Advisory GHSA-vcvr-r3jv-pc5j](https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j)\n- [Satori Security Advisory GHSA-wx4j-mvgx-mqwp](https://github.com/vercel/satori/security/advisories/GHSA-wx4j-mvgx-mqwp)\n- [Satori Patch Commit 26a52affc](https://github.com/vercel/satori/commit/26a52affc031216fee5882b6e965c8dbc7ac1782)\n- [Next.js Patch Commit 868fad3](https://github.com/vercel/next.js/commit/868fad38690d72088868f299fa2bef339b26838e)\n- [Satori Core Serialization PR 814](https://github.com/vercel/satori/pull/814)\n- [Next.js v16.3.6 Release Tags](https://github.com/vercel/next.js/releases/tag/v16.3.6)\n- [Next.js Security Blog Update September 2026](https://nextjs.org/blog/nextjs-security-update-september-22-2026)\n- [Netlify Customer Advisory on ImageResponse vulnerability](https://www.netlify.com/changelog/2026-09-22-nextjs-imageresponse-vulnerability/)\n- [Hassham1 CVE-2026-94545 next/og loopback test lab and scanner](https://github.com/Hassham1/CVE-2026-94545-nextjs-og-poc)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-VCVR-R3JV-PC5J) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-30T15:30:30.000000Z"}, {"uuid": "a714ae20-d9aa-4c5a-a168-7720917f5f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103881", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MRdark-ops\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-30 15:25:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNext.js next/og unauthenticated RCE (CVE-2026-94545) - PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-30T16:00:08.000000Z"}, {"uuid": "4a9c07b3-0296-4adf-8555-a8e0bbdd7b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwslp5fvcw2x", "content": "Details and PoC exploit code are public for CVE-2026-94545, an unauthenticated Next.js RCE in next/og. Upgrade to Next.js 16.3.6 now.\n\n#NextJS #CVE202694545 #RCE #PoC #Satori #WebSecurity #Vercel", "creation_timestamp": "2026-10-01T09:55:27.224321Z"}, {"uuid": "1c45f1cd-39cc-4c16-8724-9ba1464e2728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117365116009269558", "content": "Next.js unauthenticated RCE PoC https://github.com/EQSTLab/CVE-2026-94545", "creation_timestamp": "2026-10-01T10:12:28.925363Z"}, {"uuid": "a85449ab-83d4-4cbe-8cbc-a590f29db463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mwsmnq6oxm22", "content": "Next.js unauthenticated RCE PoC https://github.com/EQSTLab/CVE-2026-94545", "creation_timestamp": "2026-10-01T10:12:37.373463Z"}, {"uuid": "f4d8eaac-376c-4ee3-ac42-abc2d695de5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/CyberDispatch/3092", "content": "Critical Next.js Vulnerability (CVE-2026-94545) Allows Remote Code Execution \u2014 The flaw in the \"next/og\" ImageResponse feature affects versions 16.2.0 to before 16.3.6; users urged to update immediately.", "creation_timestamp": "2026-09-26T06:23:42.000000Z"}, {"uuid": "1b2c8c0f-797b-40c2-8a5f-e7cda9ddf4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwu6wkxpv423", "content": "Next.js RCE PoC Released for CVE-2026-94545 \u2014 CVSS 9.5 Critical Flaw\uff08Next.js\u306e\u91cd\u5927RCE\u8106\u5f31\u6027CVE-2026-94545\u3001PoC\u304c\u516c\u958b\uff09 #SecurityOnline (Oct 1)\nsecurityonline.info/nextjs-rce-p...", "creation_timestamp": "2026-10-02T01:12:16.058430Z"}, {"uuid": "93bce917-c779-48a7-bb14-24272b813838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/1RQeb1HjNkrQgeLVuhp8BTCYScKY_LLqUTOdK2mni14dXJ8", "content": "", "creation_timestamp": "2026-09-29T11:00:19.000000Z"}, {"uuid": "3d00b110-cbdb-4904-b968-00f6a1af81f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/TqNqrmXtCT53jhodw0mNTasz9swfV0hwnIJG5-v7_EIYXEU", "content": "", "creation_timestamp": "2026-09-30T19:00:14.000000Z"}, {"uuid": "46fd1cff-1e74-4d0d-9fbb-146ff4f80aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "989e3592-7de6-48fc-90c4-db81503422ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}, {"uuid": "45835ef7-95fc-49e7-b198-776321f4c0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "Telegram/exVAhrP1-AAubpKYl6FaYOVvUMj-EWVwuiZhrcEaPgn_YiI", "content": "", "creation_timestamp": "2026-09-30T11:00:16.000000Z"}, {"uuid": "3dac8a2f-d6c2-4c1a-92b7-d39dbcddd426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "Telegram/TqNqrmXtCT53jhodw0mNTasz9swfV0hwnIJG5-v7_EIYXEU", "content": "", "creation_timestamp": "2026-09-30T19:00:14.000000Z"}, {"uuid": "2e846c39-56bb-4da2-b146-53cd8d42d898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "Telegram/hVzfzjG8HX7XkYPzE6lD345G0zvEviIj5TgMsHDl6OFau3k", "content": "", "creation_timestamp": "2026-09-30T15:00:07.000000Z"}, {"uuid": "712ba345-f55a-4f3f-a51e-6ce39da4b0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "Telegram/1RQeb1HjNkrQgeLVuhp8BTCYScKY_LLqUTOdK2mni14dXJ8", "content": "", "creation_timestamp": "2026-09-29T11:00:19.000000Z"}, {"uuid": "c714293a-7273-4a07-ae8c-de9e30a24ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mwwdb3cdzk2l", "content": "The latest update for #Indusface includes \"#WordPress CVE-2026-87902: Unauthenticated RCE Exploited Within Hours\" and \"Next.js CVE-2026-94545: Critical ImageResponse Vulnerability Enables RCE via SVG\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-10-02T21:35:03.862114Z"}]}