Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
CVE-2026-94545: Critical Next.js ImageResponse Flaw Enables Remote Code Execution
Excerpt
A critical vulnerability in Next.js could allow remote attackers to execute arbitrary code on vulnerable servers through the framework’s ImageResponse functionality. Tracked as CVE-2026-94545, the flaw affects the Node.js implementation of ImageResponse in next/og and carries a CVSS score of 9.5. Vercel addressed the issue on September 22, 2026, with the release of Next.js 16.3.6. The vulnerability becomes exploitable when an application places attacker-controlled input into…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-94545 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…