STALE Last successful ingest finished — the hourly job may be failing.
onyx --tech nextjs
Next.js
Vercel · framework
- cves
- 57
- in kev
- 1
- public poc
- 10
- nuclei
- 0
- worst
- HIGH
- latest
- 2026-10-02
CVEs
| CVE | Score | Sev | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|---|
| CVE-2026-44579 | 0.6 | HIGH | 7.5 | 0.8% | POC | 2026-05-13 |
| CVE-2026-94483 | 0.4 | MED | 6.5 | 0.2% | 2026-10-02 | |
| CVE-2026-94485 | 0.4 | MED | 5.3 | 0.2% | 2026-10-02 | |
| CVE-2026-94543 | 0.4 | MED | 5.3 | 0.3% | 2026-10-02 | |
| CVE-2026-103004 | 0.4 | MED | 5.3 | 0.2% | 2026-10-01 | |
| CVE-2026-94486 | 0.4 | MED | 5.4 | 0.1% | 2026-10-02 | |
| CVE-2026-94484 | 0.3 | MED | 4.8 | 0.2% | 2026-10-02 | |
| CVE-2026-94544 | 0.3 | MED | 4.2 | 0.2% | 2026-10-02 | |
| CVE-2026-29057 | 0.2 | MED | 6.5 | 0.5% | POC | 2026-03-18 |
| CVE-2026-27978 | 0.2 | MED | 4.3 | 0.2% | POC | 2026-03-18 |
| CVE-2026-64642 | 0.1 | HIGH | 8.2 | 0.6% | 2026-07-27 | |
| CVE-2026-64641 | 0.1 | HIGH | 7.5 | 0.9% | 2026-07-27 | |
| CVE-2026-64649 | 0.1 | MED | 6.5 | 0.5% | 2026-07-27 | |
| CVE-2026-64645 | 0.1 | MED | 6.1 | 0.4% | 2026-07-27 | |
| CVE-2026-64644 | 0.1 | MED | 5.3 | 0.7% | 2026-07-27 | |
| CVE-2026-64646 | 0.1 | MED | 5.3 | 0.5% | 2026-07-27 | |
| CVE-2026-64643 | 0.1 | MED | 5.3 | 0.5% | 2026-07-27 | |
| CVE-2026-64648 | 0.1 | MED | 5.4 | 0.3% | 2026-07-27 | |
| CVE-2026-64647 | 0.1 | MED | 5.4 | 0.3% | 2026-07-27 | |
| CVE-2025-55183 | <0.1 | MED | 5.3 | 64.2% | POC | 2025-12-11 |
| CVE-2026-44574 | <0.1 | HIGH | 8.1 | 0.7% | 2026-05-13 | |
| CVE-2026-45109 | <0.1 | HIGH | 7.5 | 0.8% | 2026-05-13 | |
| CVE-2026-44575 | <0.1 | HIGH | 7.5 | 0.8% | 2026-05-13 | |
| CVE-2026-44573 | <0.1 | HIGH | 7.5 | 0.8% | 2026-05-13 | |
| CVE-2026-44577 | <0.1 | MED | 5.9 | 0.9% | 2026-05-13 | |
| CVE-2026-44580 | <0.1 | MED | 6.1 | 0.3% | 2026-05-13 | |
| CVE-2026-44576 | <0.1 | MED | 5.4 | 0.3% | 2026-05-13 | |
| CVE-2026-44581 | <0.1 | MED | 4.7 | 0.2% | 2026-05-13 | |
| CVE-2026-44572 | <0.1 | LOW | 3.7 | 0.2% | 2026-05-13 | |
| CVE-2026-44582 | <0.1 | LOW | 3.7 | 0.2% | 2026-05-13 | |
| CVE-2026-27980 | <0.1 | HIGH | 7.5 | 0.9% | 2026-03-18 | |
| CVE-2026-27979 | <0.1 | HIGH | 7.5 | 0.9% | 2026-03-18 | |
| CVE-2026-27977 | <0.1 | MED | 5.4 | 0.2% | 2026-03-18 | |
| CVE-2025-67779 | <0.1 | HIGH | 7.5 | 20.0% | 2025-12-12 | |
| CVE-2025-59471 | <0.1 | MED | 5.9 | 0.5% | 2026-01-26 | |
| CVE-2025-59472 | <0.1 | MED | 5.9 | 0.4% | 2026-01-26 | |
| CVE-2024-46982 | <0.1 | HIGH | 7.5 | 59.2% | KEVPOC | 2024-09-17 |
| CVE-2025-49005 | <0.1 | LOW | 3.7 | 0.5% | POC | 2025-07-03 |
| CVE-2025-32421 | <0.1 | LOW | 3.7 | 0.8% | POC | 2025-05-14 |
| CVE-2024-51479 | <0.1 | HIGH | 7.5 | 4.0% | POC | 2024-12-17 |
| CVE-2023-46298 | <0.1 | HIGH | 7.5 | 1.3% | POC | 2023-10-22 |
| CVE-2024-34350 | <0.1 | HIGH | 7.5 | 1.2% | POC | 2024-05-14 |
| CVE-2021-43803 | <0.1 | HIGH | 7.5 | 47.3% | 2021-12-10 | |
| CVE-2022-21721 | <0.1 | MED | 5.9 | 2.2% | 2022-01-28 | |
| CVE-2025-49826 | <0.1 | HIGH | 7.5 | 1.1% | 2025-07-03 | |
| CVE-2021-39178 | <0.1 | HIGH | 7.5 | 1.1% | 2021-08-31 | |
| CVE-2022-23646 | <0.1 | MED | 5.9 | 1.8% | 2022-02-17 | |
| CVE-2021-37699 | <0.1 | MED | 6.9 | 1.0% | 2021-08-12 | |
| CVE-2024-39693 | <0.1 | HIGH | 7.5 | 0.5% | 2024-07-10 | |
| CVE-2022-36046 | <0.1 | MED | 5.3 | 1.2% | 2022-08-31 | |
| CVE-2024-47831 | <0.1 | MED | 5.9 | 0.7% | 2024-10-14 | |
| CVE-2025-57752 | <0.1 | MED | 6.2 | 0.3% | 2025-08-29 | |
| CVE-2024-56332 | <0.1 | MED | 5.3 | 0.8% | 2025-01-03 | |
| CVE-2025-30218 | <0.1 | MED | 5.9 | 0.4% | 2025-04-02 | |
| CVE-2020-15242 | <0.1 | MED | 4.7 | 0.8% | 2020-10-08 | |
| CVE-2025-55173 | <0.1 | MED | 4.3 | 0.6% | 2025-08-29 | |
| CVE-2025-48068 | <0.1 | MED | 4.3 | 0.2% | 2025-05-30 |
Exploitation speed & trend
How fast Next.js bugs get exploited, from this watchlist's own history.
- published → kev
- only 1 KEV-listed CVE with a publish date — too few for a median
- published → first chatter
- no community mentions in the last 30 days
Daily KEV / critical counts start today — the trend chart appears from the second day.
Matching
- cpe
cpe:2.3:a:vercel:next.js- keywords
next.jsnextjs