What’s Vulnerable › Products

projectdiscovery nuclei vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your projectdiscovery nuclei version is affected

Latest projectdiscovery nuclei vulnerabilities

• CVE-2026-76805 — Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode (CVSS 5.3)
• CVE-2026-76804 — Nuclei: Local File Read via Workflow File-Protocol Gate Bypass (CVSS 5.5)
• CVE-2026-76803 — Nuclei: Local File Read via MySQL Client Sandbox Bypass (CVSS 5.3)
• CVE-2026-76802 — Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass (CVSS 4.7)
• CVE-2026-92718 — Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache (CVSS 7.3)
• CVE-2026-41646 — Nuclei: Local File Read via require() Module Loader Bypass (CVSS 5.5)
• CVE-2026-41645 — Nuclei: Environment variable disclosure via Response-Derived DSL Expressions (CVSS 5.3)
• CVE-2026-41282 — (CVSS 7.5)
• CVE-2024-43405 — Nuclei Template Signature Verification Bypass (CVSS 7.8)
• CVE-2024-40641 — Unsigned code template execution through workflows in projectdiscovery/nuclei (CVSS 7.4)
• CVE-2024-27920 — Unsigned code template execution through workflows in projectdiscovery/nuclei (CVSS 7.4)
• CVE-2023-37896 — Nuclei Path Traversal vulnerability (CVSS 7.5)