nuclei
projectdiscovery- Product type
- Other
- Catalog vulnerabilities
- 8
Severity across 8 analyzed records
Verify to analyze this security profile
en
Severity across 8 analyzed records
Verify to analyze this security profile
As of 09/20/2026, within CyStack's analyzed data, nuclei has 1 security vulnerability published in the last 90 days. Of these, 1 is rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of nuclei and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-92718Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache | Exploitation statusPublic exploit | FixYes | Published09/16/2026 | SeverityHigh |
CVE-2026-41645Nuclei: Environment variable disclosure via Response-Derived DSL Expressions | Exploitation statusNot known exploited | FixYes | Published05/08/2026 | SeverityMedium |
CVE-2026-41646Nuclei: Local File Read via require() Module Loader Bypass | Exploitation statusPublic exploit | FixYes | Published05/08/2026 | SeverityMedium |
CVE-2026-41282 | Exploitation statusPublic exploit | FixYes | Published04/20/2026 | SeverityMedium |
CVE-2024-43405Nuclei Template Signature Verification Bypass | Exploitation statusPublic exploit | FixNot confirmed | Published09/04/2024 | SeverityHigh |
CVE-2024-40641Unsigned code template execution through workflows in projectdiscovery/nuclei | Exploitation statusPublic exploit | FixNot confirmed | Published07/17/2024 | SeverityHigh |
CVE-2024-27920Unsigned code template execution through workflows in projectdiscovery/nuclei | Exploitation statusNot known exploited | FixNot confirmed | Published03/15/2024 | SeverityHigh |
CVE-2023-37896Nuclei Path Traversal vulnerability | Exploitation statusNot known exploited | FixYes | Published08/04/2023 | SeverityHigh |