Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's JavaScript protocol runtime allows JavaScript templates to read local .js and .json files through the require() function, bypassing the default local file access restriction. This issue has been patched in version 3.8.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | Disclosure1 |
| 2026-05-10 | 1 | General1 |
CVE-2026-41646 Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's JavaScript protocol runtim… https://www.cve.org/CVERecord?id=CVE-2026-41646
Post summary
The snippet references CVE-2026-41646 in the Nuclei scanner, noting a runtime vulnerability, but provides no details on PoCs, exploits, patches, or active use.
⚡ New CVE Alert: CVE-2026-41646 📊 Severity: 5.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-41646 #CVE-2026-41646 #CVE #Medium #CyberSecurity #InfoSec https://t.co/lBleg5fNbd
Post summary
A new CVE (CVE‑2026‑41646) with medium severity has been announced, but the tweet provides no further technical or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | projectdiscovery | nuclei | - | go | - |