{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T17:35:47.783Z",
  "tag": {
    "id": "vercel",
    "label": "Vercel",
    "isStack": false,
    "url": "https://pwn.watch/t/vercel",
    "feed": "https://pwn.watch/t/vercel/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 2,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "nextjs-october-2026-rce-security-release",
      "title": "Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)",
      "url": "https://pwn.watch/i/nextjs-october-2026-rce-security-release",
      "json": "https://pwn.watch/i/nextjs-october-2026-rce-security-release.json",
      "status": "live",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Next.js (next on npm), sharp / librsvg",
      "tags": [
        "node",
        "npm",
        "nextjs",
        "vercel",
        "sharp",
        "rce"
      ],
      "cveIds": [
        "CVE-2026-96889"
      ],
      "affectedVersions": [
        "next >= 10.0.0, <= 15.5.27 (Image Optimization SVG RCE, CVE-2026-96889)",
        "next >= 16.0.0, <= 16.4.0",
        "sharp < 0.35.5 (bundles vulnerable librsvg)"
      ],
      "fixedVersions": [
        "next 15.5.28",
        "next 16.4.1",
        "sharp 0.35.5 (librsvg 2.63.2)"
      ],
      "startedAt": "2026-10-14",
      "closedAt": null,
      "updatedAt": "2026-10-22T18:00:43+02:00",
      "summary": "On Oct 14 2026 Vercel shipped Next.js 16.4.1 and 15.5.28 with two critical unauthenticated remote code execution fixes held back from the September release: CVE-2026-96889 / GHSA-2464-fhr4-w9xw, a use-after-free in librsvg (via sharp) reachable through the Image Optimization API when SVGs are processed on glibc-based Linux, and GHSA-673q-mjm6-r5xr, RCE in App Router apps with Cache Components when a `use cache` function returns multiple typed arrays. A high-severity Server Actions DoS (GHSA-p3m5-59mp-jv5r) is fixed too. GitHub added the SVG advisory to its global database on Oct 22. No known exploitation.",
      "xPost": null
    },
    {
      "slug": "pwnescape-cve-2026-99999",
      "title": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999",
      "json": "https://pwn.watch/i/pwnescape-cve-2026-99999.json",
      "status": "live",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Linux kernel networking (host side of KVM/Firecracker and similar)",
      "tags": [
        "linux",
        "vercel",
        "kvm",
        "firecracker"
      ],
      "cveIds": [
        "CVE-2026-99999"
      ],
      "affectedVersions": [
        "Kernels before stable backports such as 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11 (verify vendor packages)"
      ],
      "fixedVersions": [
        "Upstream commit 6785011f8b16 and matching stable backports; vendor kernels as listed by distros"
      ],
      "startedAt": "2026-10-08",
      "closedAt": null,
      "updatedAt": "2026-10-22T11:18:00+02:00",
      "summary": "Paulos Yibelo / pwn.ai found a Critical Linux networking flaw (CVE-2026-99999, CVSS 9.3) during Vercel’s $1M Sandbox challenge. Guest-controlled checksum metadata can rewrite an IPv4 header after validation, enabling host-memory disclosure and, in lab conditions, guest-to-host code execution on KVM/Firecracker. Upstream fix merged Oct 2026; host kernels need patch + reboot. Affects multi-tenant VPS / sandbox providers more than end-user desktops.",
      "xPost": null
    },
    {
      "slug": "react2shell-react-server-components-cve-2025-55182",
      "title": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182",
      "json": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "React Server Components (react-server-dom-*), Next.js",
      "tags": [
        "node",
        "react2shell",
        "react",
        "nextjs",
        "vercel",
        "rce",
        "zero-day",
        "cisa-kev",
        "ransomware"
      ],
      "cveIds": [
        "CVE-2025-55182"
      ],
      "affectedVersions": [
        "React 19.0.0, 19.1.0-19.1.1, 19.2.0 (react-server-dom-webpack / -parcel / -turbopack)",
        "Next.js App Router releases using affected React (see advisory)"
      ],
      "fixedVersions": [
        "React 19.0.1",
        "React 19.1.2",
        "React 19.2.1",
        "Next.js: patched release lines per the React/Next.js advisory"
      ],
      "startedAt": "2025-12-03",
      "closedAt": "2025-12-12",
      "updatedAt": "2025-12-12",
      "summary": "A flaw in how React Server Components deserialize Flight payloads let an unauthenticated request run code on the server. Next.js App Router apps were affected by default. China-nexus groups including Earth Lamia and Jackpot Panda exploited it within hours of disclosure. CVE-2025-66478 (the Next.js id) was rejected as a duplicate.",
      "xPost": null
    },
    {
      "slug": "nextjs-middleware-auth-bypass-cve-2025-29927",
      "title": "Next.js middleware authorization bypass via x-middleware-subrequest (CVE-2025-29927)",
      "url": "https://pwn.watch/i/nextjs-middleware-auth-bypass-cve-2025-29927",
      "json": "https://pwn.watch/i/nextjs-middleware-auth-bypass-cve-2025-29927.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Next.js (self-hosted)",
      "tags": [
        "node",
        "nextjs",
        "vercel",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2025-29927"
      ],
      "affectedVersions": [
        "11.1.4-12.3.4",
        "13.0.0-13.5.8",
        "14.0.0-14.2.24",
        "15.0.0-15.2.2"
      ],
      "fixedVersions": [
        "12.3.5",
        "13.5.9",
        "14.2.25",
        "15.2.3"
      ],
      "startedAt": "2025-03-21",
      "closedAt": "2025-03-22",
      "updatedAt": "2025-03-22",
      "summary": "Sending a crafted x-middleware-subrequest header made self-hosted Next.js skip middleware entirely, bypassing auth checks done there. Apps hosted on Vercel were protected. Fixed in 12.3.5, 13.5.9, 14.2.25 and 15.2.3; otherwise strip the header at the edge.",
      "xPost": null
    }
  ],
  "posts": [
    {
      "authorName": "Smukx.E",
      "handle": "5mukx",
      "avatarUrl": "https://pbs.twimg.com/profile_images/2091240145597149184/VgritadL_bigger.jpg",
      "text": "PwnEscape-Ai Research: Guest-to-Host KVM Escape (CVE-2026-99999). \n\nTLDR;- How a $1 million sandbox challenge led us to a vulnerability in Linux networking, repeatable host-memory disclosure, and ultimately a full guest-to-host escape.\n\nBlog:- https://t.co/CJERkG4rsE https://t.co/gdXbOvkklw",
      "date": "2026-10-20T17:15:55.000Z",
      "url": "https://x.com/5mukx/status/2112593667601125676",
      "media": [
        {
          "type": "image",
          "url": "https://pbs.twimg.com/media/HVFwRXXaMAAvIvQ.jpg"
        }
      ],
      "incident": "pwnescape-cve-2026-99999"
    },
    {
      "authorName": "blackorbird",
      "handle": "blackorbird",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1390264140908748806/I8nxLuzB_bigger.jpg",
      "text": "How can one obtain such a great identifier as CVE-2026-99999? #PwnEscape",
      "date": "2026-10-19T08:17:27.000Z",
      "url": "https://x.com/blackorbird/status/2112095772124864777",
      "media": [],
      "incident": "pwnescape-cve-2026-99999"
    },
    {
      "authorName": "The Daily Tech Feed",
      "handle": "dailytechonx",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1889684200258764800/AEZLG4yL_bigger.jpg",
      "text": "Just uncovered: the “PwnEscape” Linux kernel flaw (CVE-2026-99999) lets guest VMs read host memory. A 9.3/10 critical issue, exposed via crafted packets in Vercel’s sandbox and patched in recent kernel versions. If you run shared Linux hosts, updating is mandatory. https://t.co/mqBjjVqe1d",
      "date": "2026-10-15T20:41:18.000Z",
      "url": "https://x.com/dailytechonx/status/2110833417642291284",
      "media": [
        {
          "type": "image",
          "url": "https://pbs.twimg.com/media/HUsvzsdWsAAq8Wp.jpg"
        }
      ],
      "incident": "pwnescape-cve-2026-99999"
    },
    {
      "authorName": "The Hacker News",
      "handle": "TheHackersNews",
      "avatarUrl": "https://pbs.twimg.com/profile_images/1597647879811657728/FLgHrLHy_bigger.jpg",
      "text": "‼️ ALERT  - Next.js just shipped an out-of-band security update for TWO critical unauthenticated RCE flaws (both CVSS 9.5) + a high-severity DoS.\n\nRCEs: RSC use cache (GHSA-673q-mjm6-r5xr) and librsvg via sharp (CVE-2026-96889).\n\n🔗 Read - https://t.co/ndnN46ysGv",
      "date": "2026-10-15T12:35:50.000Z",
      "url": "https://x.com/TheHackersNews/status/2110711243942330566",
      "media": [],
      "incident": "nextjs-october-2026-rce-security-release"
    },
    {
      "authorName": "ThreatWire",
      "handle": "ThreatWire_",
      "avatarUrl": "https://pbs.twimg.com/profile_images/2074748840775688192/LvaBIlOK_bigger.jpg",
      "text": "🚨 CRITICAL: CVE-2026-96889 — Next.js Image Optimization RCE via SVG (librsvg/sharp)\n\nScore 9.5 (CVSS 4.0, Next.js advisory). Unauthenticated. Glibc Linux.\nAffects Next.js 10.0.0–15.5.27 and 16.0.0–16.4.0.\nFixed in 15.5.28 and 16.4.1. Check npm ls sharp → 0.35.5+.\nNot in CISA",
      "date": "2026-10-15T05:37:11.000Z",
      "url": "https://x.com/ThreatWire_/status/2110605887907713139",
      "media": [],
      "incident": "nextjs-october-2026-rce-security-release"
    }
  ],
  "changes": [
    {
      "incident": "nextjs-october-2026-rce-security-release",
      "incidentTitle": "Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-22",
      "title": "GitHub publishes GHSA-2464-fhr4-w9xw to the global Advisory Database (critical), so Dependabot and npm audit start flagging affected next versions.",
      "body": null,
      "sourceUrl": "https://github.com/advisories/GHSA-2464-fhr4-w9xw",
      "url": "https://pwn.watch/i/nextjs-october-2026-rce-security-release"
    },
    {
      "incident": "nextjs-october-2026-rce-security-release",
      "incidentTitle": "Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-14",
      "title": "Vercel releases Next.js 16.4.1 and 15.5.28 as an out-of-band security update: two critical unauthenticated RCEs (SVG Image Optimization, `use cache` typed arrays) and a high-severity Server Actions DoS. No workaround for the `use cache` bug; upgrade even if you don't use those features.",
      "body": null,
      "sourceUrl": "https://nextjs.org/blog/nextjs-security-update-october-14-2026",
      "url": "https://pwn.watch/i/nextjs-october-2026-rce-security-release"
    },
    {
      "incident": "nextjs-october-2026-rce-security-release",
      "incidentTitle": "Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-14",
      "title": "Netlify: the SVG flaw is also reachable through `next/og` ImageResponse; on Netlify the next/image path runs on its Image CDN, and impact there is a crashed function, not code execution.",
      "body": null,
      "sourceUrl": "https://www.netlify.com/changelog/2026-10-14-nextjs-react-security-vulnerabilities/",
      "url": "https://pwn.watch/i/nextjs-october-2026-rce-security-release"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-14/15",
      "title": "Mainline merge / public write-ups.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-07/08",
      "title": "Upstream IPv4 checksum guard accepted into net.git.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "nextjs-october-2026-rce-security-release",
      "incidentTitle": "Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-09-27",
      "title": "sharp 0.35.5 ships with librsvg 2.63.2; sharp's advisory GHSA-wq5f-xc86-pv6w later covers CVE-2026-96889 (use-after-free in librsvg).",
      "body": null,
      "sourceUrl": "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
      "url": "https://pwn.watch/i/nextjs-october-2026-rce-security-release"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-08-20",
      "title": "Initial host-memory disclosure reported.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-08-18",
      "title": "Vercel Sandbox challenge opens.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "react2shell-react-server-components-cve-2025-55182",
      "incidentTitle": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-12",
      "title": "Unit 42 updates its threat brief on ongoing exploitation",
      "body": null,
      "sourceUrl": "https://unit42.paloaltonetworks.com/cve-2025-55182-react-and-cve-2025-66478-next/",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182"
    },
    {
      "incident": "react2shell-react-server-components-cve-2025-55182",
      "incidentTitle": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-05",
      "title": "CISA adds CVE-2025-55182 to KEV",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182"
    },
    {
      "incident": "react2shell-react-server-components-cve-2025-55182",
      "incidentTitle": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-03",
      "title": "React discloses a critical vulnerability in React Server Components and ships fixes",
      "body": null,
      "sourceUrl": "https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182"
    },
    {
      "incident": "react2shell-react-server-components-cve-2025-55182",
      "incidentTitle": "React2Shell: CVSS 10 unauthenticated RCE in React Server Components and Next.js",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-03",
      "title": "AWS sees China-nexus groups exploiting it within hours",
      "body": "Including Earth Lamia and Jackpot Panda.",
      "sourceUrl": "https://aws.amazon.com/blogs/security/china-nexus-cyber-threat-groups-rapidly-exploit-react2shell-vulnerability-cve-2025-55182/",
      "url": "https://pwn.watch/i/react2shell-react-server-components-cve-2025-55182"
    },
    {
      "incident": "nextjs-middleware-auth-bypass-cve-2025-29927",
      "incidentTitle": "Next.js middleware authorization bypass via x-middleware-subrequest (CVE-2025-29927)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-03-22",
      "title": "Vercel publishes a postmortem on the bypass and its disclosure handling",
      "body": null,
      "sourceUrl": "https://vercel.com/blog/postmortem-on-next-js-middleware-bypass",
      "url": "https://pwn.watch/i/nextjs-middleware-auth-bypass-cve-2025-29927"
    },
    {
      "incident": "nextjs-middleware-auth-bypass-cve-2025-29927",
      "incidentTitle": "Next.js middleware authorization bypass via x-middleware-subrequest (CVE-2025-29927)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-03-21",
      "title": "Next.js publishes advisory GHSA-f82v-jwr5-mffw",
      "body": null,
      "sourceUrl": "https://github.com/vercel/next.js/security/advisories/GHSA-f82v-jwr5-mffw",
      "url": "https://pwn.watch/i/nextjs-middleware-auth-bypass-cve-2025-29927"
    }
  ]
}