https://vulnerability.circl.lu/sightings/feed 2026-09-25T09:54:33.457118+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/adf85058-ea12-44f4-8094-7a5d1e410ebb/export 2026-09-25T09:54:33.487371+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "adf85058-ea12-44f4-8094-7a5d1e410ebb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/CyberDispatch/3069", "content": "Next.js patched a critical ImageResponse flaw that can lead to server code execution.\n\n\"CVE-2026-94545\" affects 16.2.0 through 16.3.5 on Node.js when attacker-controlled values reach generated SVG. The fix is 16.3.6.", "creation_timestamp": "2026-09-24T06:26:15.000000Z"} 2026-09-24T06:26:15+00:00 https://vulnerability.circl.lu/sighting/d0361730-a208-49db-b567-93c4a930e1de/export 2026-09-25T09:54:33.489206+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d0361730-a208-49db-b567-93c4a930e1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwabvl6f5o2n", "content": "Next.js RCE Vulnerability CVE-2026-94545: Critical ImageResponse Flaw Enables Remote Code Execution\uff08Next.js\u306b\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\u3001ImageResponse\u3078\u306e\u7d30\u5de5\u3055\u308c\u305fSVG\u5165\u529b\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\uff09 #SecurityOnline (Sep 23)\n\nsecurityonline.info/nextjs-rce-v...", "creation_timestamp": "2026-09-24T03:12:09.299235Z"} 2026-09-24T03:12:09.299235+00:00 https://vulnerability.circl.lu/sighting/b11145c5-8c19-4213-a972-749b26123583/export 2026-09-25T09:54:33.489357+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b11145c5-8c19-4213-a972-749b26123583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwaa7kbv5s2t", "content": "Your link preview just got a day job, Morty. Next.js ImageResponse on Node (CVE-2026-94545, CVSS 9.5) can launder a URL into SVG, then into server shell via Satori. Patch is 16.3.6. Edge version shrugs. Even the thumbnail freelances now. day267.012", "creation_timestamp": "2026-09-24T02:41:58.651078Z"} 2026-09-24T02:41:58.651078+00:00 https://vulnerability.circl.lu/sighting/ca5026d0-5647-4019-a0e0-2106980ca08c/export 2026-09-25T09:54:33.489482+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ca5026d0-5647-4019-a0e0-2106980ca08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mw7oos2rfw2s", "content": "\ud83d\udea8 CVE-2026-94545: Critical RCE in Next.js 16.2.0\u201316.3.5 via SVG injection when attacker-controlled input reaches ImageResponse. Next.js 15 and Edge ImageResponse are unaffected.\n\ud83d\udc49 Update to 16.3.6.\nDetails: buff.ly/74eZfz1", "creation_timestamp": "2026-09-23T21:28:21.016035Z"} 2026-09-23T21:28:21.016035+00:00 https://vulnerability.circl.lu/sighting/58794f51-4aea-43bf-91b7-c26428d0c840/export 2026-09-25T09:54:33.489602+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "58794f51-4aea-43bf-91b7-c26428d0c840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/GithubRedTeam/103144", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545-nextjs-og-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-23 14:52:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94545 / GHSA-vcvr-r3jv-pc5j \u2014 Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-23T15:06:05.000000Z"} 2026-09-23T15:06:05+00:00 https://vulnerability.circl.lu/sighting/37bc78d4-8345-4a45-9553-78dceb648195/export 2026-09-25T09:54:33.489723+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "37bc78d4-8345-4a45-9553-78dceb648195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103144", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94545-nextjs-og-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassham1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-23 14:52:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-94545 / GHSA-vcvr-r3jv-pc5j \u2014 Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-23T15:06:05.000000Z"} 2026-09-23T15:06:05+00:00 https://vulnerability.circl.lu/sighting/290f075a-080b-4f90-8e73-36557029a416/export 2026-09-25T09:54:33.489839+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "290f075a-080b-4f90-8e73-36557029a416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mw6iine23k2e", "content": "A critical vulnerability (CVE-2026-94545, CVSS 9.5) in Next.js versions 16.2.0 through 16.3.5 allows remote code execution via the ImageResponse feature [\u2026]", "creation_timestamp": "2026-09-23T10:04:52.962608Z"} 2026-09-23T10:04:52.962608+00:00 https://vulnerability.circl.lu/sighting/a8e9a02e-80b0-4589-875e-675e2740645a/export 2026-09-25T09:54:33.489952+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a8e9a02e-80b0-4589-875e-675e2740645a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94545", "type": "seen", "source": "https://t.me/thehackernews/10135", "content": "\u203c\ufe0f Next.js patched a critical ImageResponse flaw that can lead to server code execution.\n\n\"CVE-2026-94545\" affects 16.2.0 through 16.3.5 on Node.js when attacker-controlled values reach generated SVG. The fix is 16.3.6.\n\nInside the bug: https://thehackernews.com/2026/09/critical-nextjs-imageresponse-flaw-can.html", "creation_timestamp": "2026-09-23T07:12:34.000000Z"} 2026-09-23T07:12:34+00:00