Known vulnerabilities in Next.js 16.3.5

Vendor: vercel
Software: Next.js
Version: 16.3.5
Software CPE: cpe:2.3:a:vercel:nextjs:*:*:*:*:*:*:*:*
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Next.js version 16.3.5 Next.js 16.3.5 is affected by 1 vulnerabilities: 1 high Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151855 - Improper input validation
CVE-2026-94545
CWE-20 High
No
No
16.3.6 23.09.2026 SB2026092349