ProjectDiscovery Nuclei

• CVE-2026-76805 Medium 5.3 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode 0.4%
• CVE-2026-76802 Medium 4.7 Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass 0.2%
• CVE-2026-76804 Medium 5.5 Nuclei: Local File Read via Workflow File-Protocol Gate Bypass 0.2%
• CVE-2026-76803 Medium 5.3 Nuclei: Local File Read via MySQL Client Sandbox Bypass 0.4%
• CVE-2026-92718 High 7.3 Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache 0.1%
• CVE-2026-41645 Medium 5.3 Nuclei: Environment variable disclosure via Response-Derived DSL Expressions 0.4%
• CVE-2026-41646 Medium 5.5 Nuclei: Local File Read via require() Module Loader Bypass 0.1%
• CVE-2026-41282 Medium 4.0 ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration). 0.2%
• CVE-2024-43405 High 7.4 Nuclei Template Signature Verification Bypass 1.1%
• CVE-2024-40641 High 7.4 Unsigned code template execution through workflows in projectdiscovery/nuclei 0.3%
• CVE-2024-27920 High 7.4 Unsigned code template execution through workflows in projectdiscovery/nuclei 0.4%
• CVE-2023-37896 High 7.5 Nuclei Path Traversal vulnerability 1.0%