Log in Start free

ProjectDiscovery

Products

ProductCVEsExploitedLatest
Nuclei12–Sep 22, 2026
Interactsh2–Jun 5, 2024

Exploited and recent CVEs

  • CVE-2026-76805 Medium 5.3 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode 0.4%
  • CVE-2026-76802 Medium 4.7 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass 0.2%
  • CVE-2026-76804 Medium 5.5 Nuclei: Local File Read via Workflow File-Protocol Gate Bypass 0.2%
  • CVE-2026-76803 Medium 5.3 Nuclei: Local File Read via MySQL Client Sandbox Bypass 0.4%
  • CVE-2026-92718 High 7.3 Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache 0.1%
  • CVE-2026-41645 Medium 5.3 Nuclei: Environment variable disclosure via Response-Derived DSL Expressions 0.4%
  • CVE-2026-41646 Medium 5.5 Nuclei: Local File Read via require() Module Loader Bypass 0.1%
  • CVE-2026-41282 Medium 4.0 ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration). 0.2%
  • CVE-2024-43405 High 7.4 Nuclei Template Signature Verification Bypass 1.1%
  • CVE-2024-40641 High 7.4 Unsigned code template execution through workflows in projectdiscovery/nuclei 0.3%
  • CVE-2024-5262 Critical 9.3 ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties 0.6%
  • CVE-2024-27920 High 7.4 Unsigned code template execution through workflows in projectdiscovery/nuclei 0.4%
  • CVE-2023-37896 High 7.5 Nuclei Path Traversal vulnerability 1.0%
  • CVE-2023-36474 High 8.2 Interactsh server settings make users vulnerable to Subdomain Takeover 0.5%