CVE-2026-96889Vulnerability
Reported by 2 independent sources · first reported by The Hacker News · last reported
Last reported 5 days ago
higher than 9% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
3 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“…-2026-104632, CVE-2026-94205 (Gitea), CVE-2026-16516, CVE-2026-83540, CVE-2026-84897, CVE-2026-83540 (WolfSSH), GHSA-673q-mjm6-r5xr, CVE-2026-96889, GHSA-p3m5-59mp-jv5r (Next.js), CVE-2026-108097, CVE-2026-108099 (Drupal), CVE-2026-15911 (confluent-kafka), CVE-2026-102764 (Beyond…”
-
Múltiples vulnerabilidades en Next.js de Vercel“CVE-2026-96889: vulnerabilidad de memoria en una librería utilizada por la API Image Optimization.”
-
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing“Code execution through SVG images (CVE-2026-96889,”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-14814, CVE-2026-16301, CVE-2026-92883, CVE-2026-97229, CVE-2026-85947, CVE-2026-85948, CVE-2026-85955, CVE-2026-85956, CVE-2026-9191, CVE-2026-9192
Thanks — we review every report.