# Upcoming Next.js Security Update for a Critical Upstream Issue

DevFeed: [Upcoming Next.js Security Update for a Critical Upstream Issue](<https://devfeed.tech/articles/upcoming-next-js-security-update-for-a-critical-upstream-issue-57483.md>)

Original publisher: [Read original article](<https://nextjs.org/blog/upcoming-nextjs-security-release-september-22-2026>)

Author: Sebastian Silbermann

Published: 2026-09-21T20:00:00Z

Content type: release

Language: en

Sources: [Next.js](<https://devfeed.tech/sources/next-js-blog.md>)

Topics: [Next.js](<https://devfeed.tech/topics/next-js.md>), [Security](<https://devfeed.tech/topics/security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [22](<https://devfeed.tech/tags/22.md>), [critical](<https://devfeed.tech/tags/critical.md>), [next-js](<https://devfeed.tech/tags/next-js.md>), [security](<https://devfeed.tech/tags/security.md>), [update](<https://devfeed.tech/tags/update.md>), [upstream](<https://devfeed.tech/tags/upstream.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

Next.js plans to publish versions 16.3.6 and 15.5.26 on September 22, 2026, as an out-of-band update addressing a critical issue in an upstream dependency. The full advisory will include impact, affected versions, and upgrade instructions.

## Source excerpt

Next.js 16.3.6 and 15.5.26 are planned for a critical out-of-band security update on September 22, 2026.