Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unauthenticated unpublished content from an editor's Draft Mode fill, while an overlapping Draft Mode request can receive published content from a regular fill. When the regular request prerenders a page, the draft-dependent content can persist in the generated page and be served to later visitors until revalidation. Sites are affected when Cache Components or experimental.useCache is enabled and cached functions return draft-dependent content. This issue is fixed in version 16.3.8.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending
    use cache fills for the same key are shared without separating Draft Mode requests from regular requests.
    An overlapping regular request can receive unauthenticated unpublished content from an editor's Draft Mode
    fill, while an overlapping Draft Mode request can receive published content from a regular fill. When the
    regular request prerenders a page, the draft-dependent content can persist in the generated page and be
    served to later visitors until revalidation. Sites are affected when Cache Components or
    experimental.useCache is enabled and cached functions return draft-dependent content. This issue is fixed
    in version 16.3.8. (CVE-2026-94544)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending     use cache fills for the same key are shared without separating Draft Mode requests from regular requests.
    An overlapping regular request can receive unauthenticated unpublished content from an editor's Draft Mode     fill, while an overlapping Draft Mode request can receive published content from a regular fill. When the     regular request prerenders a page, the draft-dependent content can persist in the generated page and be     served to later visitors until revalidation. Sites are affected when Cache Components or     experimental.useCache is enabled and cached functions return draft-dependent content. This issue is fixed     in version 16.3.8. (CVE-2026-94544)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
474011	Chainguard: zitadel-4-login: security update to 4.19.4-r3	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
474011	Chainguard: zitadel-4-login: security update to 4.19.4-r3	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
473757	SCA: security update for next (GHSA-3w37-wq28-93x7)	Tenable Cloud Security	SCA Checks	Local	medium
473757	SCA: security update for next (GHSA-3w37-wq28-93x7)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
362699	Linux Distros Unpatched Vulnerability : CVE-2026-94544	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-94544

medium

Tenable Plugins

medium

medium

medium

medium

medium