Vercel / Next.js threat watch

Next.js application platform, deployment workflow, and Vercel service status watch.

Watch items

Recent Vercel / Next.js watch items

Showing the 20 most recent items, newest first. Each row links to the official advisory.

20 rows ยท sorted newest first

Operations view

Delays delivering log drains

minor
resolvedStatus incident

We've identified an issue causing delays in log drain delivery. We are investigating and will provide updates as they become available.

Aug 6, 2026, 11:37 AMOfficial source

next.js vulnerability (CVE-2026-64642)

HIGH
watchNVDCVE-2026-64642

Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue has been fixed in version 16.2.11.

Jul 27, 2026, 1:16 PMOfficial source

next.js vulnerability (CVE-2026-64641)

HIGH
watchNVDCVE-2026-64641

Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. This issue has been fixed in versions 15.5.21 and 16.2.11.

Jul 27, 2026, 1:16 PMOfficial source

Vercel Community temporarily unavailable

maintenance
resolvedStatus incident

The Vercel Community forums are currently undergoing maintenance. We are working to restore access as soon as possible.

Jul 25, 2026, 1:57 PMOfficial source

Telemetry data loss for Drains

major
resolvedStatus incident

Between 19:12 and 19:18 UTC on July 23, 2026, telemetry forwarded through Drains was not delivered. Traces and events forwarded via Drains during this window were dropped and are unrecoverable. Logs forwarded via Drains during this window were also not delivered, but remain accessible in the Logs UI dashboard, where they can also be exported. We have deployed a fix and are adding additional monitoring to detect and prevent this failure mode from happening in the future. We know how much you rely on this data, and we sincerely apologize for the disruption.

Jul 23, 2026, 2:00 PMOfficial source

Timeouts loading charts and observability data in Dashboard

major
resolvedStatus incident

We are currently investigating timeouts loading observability data for Firewall, Observability, Sandboxes, Speed Insights, Web Analytics, and Workflows. This impacts charts in the Dashboard.

Jul 23, 2026, 2:33 AMOfficial source

Dashboard authentication errors

critical
resolvedStatus incident

We are investigating an issue causing the dashboard to be inaccessible for some users.

Jul 23, 2026, 1:47 AMOfficial source

Increased invocation failures for Hobby Team functions

minor
resolvedStatus incident

There are elevated rates of invocation failures for Hobby Team functions in new deployments. Existing deployments are unaffected. We are investigating. Mitigation is possible by rolling back to a previous deployment.

Jul 17, 2026, 9:12 AMOfficial source

GitHub-linked deployments and authentication affected

minor
resolvedStatus incident

We are investigating elevated error rates for users logging in to Vercel using their GitHub account and connecting their GitHub accounts to Vercel. Login with email or other sign-in methods is unaffected.

Jul 16, 2026, 6:09 PMOfficial source

SAML Single Sign-On (SSO) errors

major
resolvedStatus incident

We are investigating SAML Single Sign-On (SSO) errors, leading to inability to login using SAML/SSO or access SSO-protected teams through the Vercel dashboard and CLI.

Jul 16, 2026, 3:39 AMOfficial source

Missing Build CPU Minutes Usage Data

minor
resolvedStatus incident

We've identified an issue where some users may see missing Build CPU Minutes data on Usage pages in the Vercel Dashboard. The issue has been resolved, and we are backfilling the affected usage data.

Jul 16, 2026, 1:07 AMOfficial source

Errors accessing teams that require 2FA

minor
resolvedStatus incident

We have identified an increase in erroneous 2FA (two-factor authentication) challenges and errors when accessing the Vercel dashboard and multiple API services for teams that require 2FA. We will share more information once we have it.

Jul 15, 2026, 6:04 PMOfficial source

Increased Build failure rates

minor
resolvedStatus incident

We've identified an issue where some customers may experience failed Builds beginning at 21:05 UTC. A rollback is in progress to mitigate this issue. We will provide additional updates as they become available. Failed deployments can be retried and should succeed.

Jul 10, 2026, 4:22 PMOfficial source

Erroneous budget notifications

minor
resolvedStatus incident

We've identified an issue where some customers may receive erroneous spend management budget notifications due to a spend management budget miscalculation. Affected teams with spend management budgets configured to pause projects may also experience paused deployments. We are currently investigating this issue. We will provide additional updates as they become available.

Jul 10, 2026, 2:53 PMOfficial source

Delays loading Build Logs

none
resolvedStatus incident

The issue affecting Build Logs has been resolved. Between Jul 8 19:05 UTC and Jul 9 13:16 UTC, some Pro customers using standard machine types may have experienced missing Build Logs. New builds after the impact period are unaffected.

Jul 10, 2026, 12:44 PMOfficial source

Delays Processing Builds

minor
resolvedStatus incident

We've identified an issue where some customers may experience delays in builds starting and/or builds stuck in an initializing state. We are currently investigating this issue and will provide additional updates as they become available.

Jul 8, 2026, 2:13 PMOfficial source

Degraded performance on CDN, Dashboard, Functions in Washington, Cleveland (iad1, cle1)

minor
resolvedStatus incident

We are investigating an issue causing degraded performance across CDN, Dashboard, & Functions in Washington, Cleveland (iad1, cle1). We'll provide additional updates as they become available.

Jul 2, 2026, 11:31 AMOfficial source

Increase in Workflow runs stuck in pending, failed

minor
resolvedStatus incident

We've identified an issue where some workflow runs created between June 30 at 22:24 UTC and July 1 at 16:08 UTC may be stuck in a pending state or have reached a failed state. New workflow runs are not impacted. We are working on a fix for runs stuck in a pending state and will provide additional updates as they become available.

Jul 1, 2026, 11:57 AMOfficial source

Intermittent Login Failures on Vercel Dashboard

major
resolvedStatus incident

We are currently investigating the issue. Some users are experiencing errors logging in. The issue started at 11:30 AM UTC.

Jun 26, 2026, 8:08 AMOfficial source

Increase in Workflow runs stuck as pending

major
resolvedStatus incident

We are currently investigating an issue where some recently deployed Workflow projects are stuck as pending and not delivering queued messages as expected.

Jun 25, 2026, 2:45 AMOfficial source

Vendor watch hub

What this page covers

The Vercel / Next.jswatch hub is a vendor-specific view inside ITECS MSP Threat Radar. We pull the latest security advisories, incidents, and known-exploited CVEs directly from the official feeds below, score each one for MSP relevance, and surface what's most likely to need attention this week.

  • Confirm whether recent Vercel / Next.js activity overlaps with your environment.
  • Prioritize advisories by MSP-relevance score, severity, and status.
  • Turn the signal into an assessment, briefing, or managed-service engagement with ITECS.

At a glance

Tracked

115

Active

0

Featured

0

Unique CVEs

2

Most recent entry

Aug 6, 2026, 11:37 AM

Feed refreshes daily ยท 5:15 a.m. Central

SourcesยทVercel status page (vercel-status.com)

"Most recent entry" is the newest item the upstream feed has published โ€” not our sync time.

Related vendors

Other cloud vendors in the radar

Vendor watch FAQ

Common questions

What is the Vercel / Next.js threat watch page?

It is the Vercel / Next.js-specific view inside ITECS Threat Radar, built to track recent advisories, incidents, and watch items that may affect Dallas-area business operations.

How should teams use the Vercel / Next.js watch page?

Use it to confirm whether current Vercel / Next.js issues overlap with your environment, prioritize remediation, and decide whether you need an assessment, managed security follow-through, or vendor-specific hardening work.

Can ITECS help respond to Vercel / Next.js security issues?

Yes. ITECS can help map Vercel / Next.js advisories against your systems, validate affected services, prioritize remediation, and connect the issue to broader managed cybersecurity or managed IT workflows.