v1.8.0 v10.4.9
high risk
firecrawl/pdf-inspectorSep 16, 2026 → Sep 16, 20260 days between releases
What's New
Adds 123 templates and 85 CVEs while rewriting AI/ML detection logic.
New Features
- Added 123 new templates covering critical vulnerabilities in GitLab, SharePoint, and WordPress.
- Added new templates for OmniRoute, CyberPanel, and LibreNMS.
- Enhanced detection logic for unauthenticated RCE and SQL injection.
- Introduced new templates for web application vulnerabilities.
Improvements
- Improved detection reliability for Grafana, Metabase, and Ruby on Rails templates.
- Rewrote AI/ML exposure templates to use raw requests and proper metadata.
- Reclassified template metadata for better organization.
Bug Fixes
- Fixed false positives for Next.js middleware.
- Fixed false positives for HP printer login detection.
Upgrade Notes
Review the 85 newly added CVEs, including critical ones like GitLab and SharePoint, to assess impact. Note that AI/ML exposure templates have been rewritten, which may affect existing detection rules.
The Two Releases
v1.8.0
v1.8.0
Sep 16, 2026· 1 month ago
Introduces the Threads channel with automation, Facebook Marketing Messages tool, MCP agent-first surface, and activates various public API scopes.
Full release notesv10.4.9
Nuclei Templates v10.4.9 - Release Notes
Sep 16, 2026· 1 month ago
Adds 123 new templates and fixes 85 CVEs, addressing critical vulnerabilities in systems like GitLab, SharePoint, and WordPress plugins.
Full release notes