Is Vercel down?

Vercel uptime, as reported

Calculated from status changes we recorded on Vercel's own status page. Scheduled maintenance is not counted as downtime.

Recent status changes

1. OperationalAll Systems Operational5d ago
2. DegradedPartially Degraded Service5d ago
3. OperationalAll Systems Operational5d ago
4. DegradedMinor Service Outage5d ago
5. OperationalAll Systems Operational19d ago
6. DegradedPartially Degraded Service19d ago
7. OperationalAll Systems Operational22d ago
8. DegradedMinor Service Outage22d ago

Vulnerabilities affecting Vercel

• CVE-2026-45109MediumCVSS 7.54mo ago

  Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2.6.

• CVE-2026-44579MediumCVSS 7.54mo ago

  Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST requests to a server action. In affected configurations, a malicious request can trigger a request-body handling deadlock that leaves connections open for an extended period, consuming file descriptors and server capacity until legitimate users are denied service. This vulnerability is fixed in 15.5.16 and 16.2.5.

• CVE-2026-44578MediumCVSS 8.64mo ago

  Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5.

• CVE-2026-44577LowCVSS 5.94mo ago

  Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a maximum size limit. An attacker could cause out-of-memory conditions by requesting large local assets from the /_next/image endpoint that match the images.localPatterns configuration (by default, all patterns are allowed). This vulnerability is fixed in 15.5.16 and 16.2.5.

• CVE-2026-44575MediumCVSS 7.54mo ago

  Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-specific route variants used for segment prefetching. In affected configurations, specially crafted .rsc and segment-prefetch URLs can resolve to the same page without being matched by the intended middleware rule, which can allow protected content to be reached without the expected authorization check. This vulnerability is fixed in 15.5.16 and 16.2.5.

Other Developer tools tools

Vercel status questions

Is Vercel down right now?

No — Vercel is operational right now. We last checked 7m ago against Vercel's official status page.

Is it Vercel or is it just me?

If this page says operational and you still can't connect, the problem is usually local — DNS, a proxy, SSO, or a single region. Vercel recorded 6 status events in the last 30 days.

How do I get alerted when Vercel goes down?

Add Vercel to your stack in ThreatLoops and outages are pushed to Slack, Microsoft Teams or a webhook — alongside vulnerabilities affecting the same vendor.