nuclei-templates Releases

Adds 182 templates and 66 CVEs, highlighting FreePBX RCE, CyberPanel Command Injection, and LiteSpeed Cache privilege escalation.

Sep 19, 2025

Adds 114 templates and 33 CVEs, focusing on CrushFTP, XWiki, and Samsung MagicINFO vulnerabilities.

Sep 1, 2025

Adds 50 templates and 8 CVEs, featuring critical RCE in NestJS DevTools and Fortinet FortiWeb SQL Injection.

Aug 9, 2025

Added 41 new templates and 27 CVEs, focusing on critical Remote Code Execution (RCE) vulnerabilities in Microsoft SharePoint, WordPress plugins, and the Yii2 PHP Framework. Also includes improvements to detection accuracy for SSL certificates and various false positive fixes.

Jul 28, 2025

Introduced 75 new templates covering critical vulnerabilities in vBulletin, Wing FTP Server, and Citrix NetScaler (CitrixBleed 2), alongside a large suite of GraphQL detection templates.

Jul 15, 2025

A stability-focused rollback release that reverts code to the v3.2.0 state to fix hanging issues present in v3.3.0.

Jul 3, 2025

Added 67 new templates focusing on legacy and critical vulnerabilities including Microsoft SMBv3 RCE, Apache HTTP Server flaws, and new panel detection templates for printers and Kubernetes.

Jul 1, 2025

Introduces concurrency support for the stdio to SSE gateway, allowing users to control the number of spawned processes.

Jun 30, 2025

Added 105 new templates, heavily focused on CISA KEV-listed vulnerabilities across Roundcube, Cisco, and Samsung, alongside improvements to detection logic for various protocols.

Jun 16, 2025

Added 65 new templates featuring critical RCEs in Invision Community, Versa Concerto, and Ivanti Endpoint Manager, along with various router and ERP vulnerabilities.

May 27, 2025

Added 41 new templates covering CraftCMS RCE, SysAid XXE, and Sonicwall file read issues, plus a suite of AWS EKS security configuration templates.

May 13, 2025

Major release introducing 268 new templates focused on Google Cloud Platform (GCP) configurations and security hardening, covering Compute Engine, GKE, Storage, and IAM.

Apr 27, 2025

Added 64 new templates addressing critical vulnerabilities in UNA CMS, MinIO, and Ingress-Nginx, alongside improvements to detection logic for various protocols and configurations.

Apr 12, 2025

Added 78 new templates targeting Next.js middleware bypass, GitLab SAML bypass, and Apache Tomcat path equivalence RCE, along with fixes for hardcoded values in templates.

Mar 28, 2025

Added 281 new templates focused on CSP Bypass (DAST) techniques and critical vulnerabilities in Sitecore, XWiki, and Ivanti EPM, including a massive list of CSP bypass templates.

Mar 10, 2025

This release introduces critical vulnerability templates for PAN-OS, DevDojo Voyager, SSL VPN, Yeti Platform, SOPlanning, MindsDB, Nexus, and ThinVNC. It also includes 52 new templates, 25 CVEs, and fixes for various false positives and negatives.

Feb 21, 2025

This release focuses on networking infrastructure improvements, including TLS support via rustls-wasm and the introduction of Wisp message handling. It also introduces feature flags for user management and new developer tools like the PDE command provider.

Feb 14, 2025

A major update adding templates for SimpleHelp, Craft CMS, Aviatrix Controller, Grafana, WordPress File Upload, WSO2, Fortinet Forticlient, and RealTek AP Router. Includes 52 new templates and fixes for multiple false positives.

Jan 22, 2025

A massive release featuring extensive internationalization support across over 20 languages, alongside significant infrastructure updates for the v86 emulator, including persistence and virtio support, as well as new AI streaming capabilities.

Jan 7, 2025

This release focuses on Alibaba Cloud configurations, adding 154 specialized templates for ECS, RDS, OSS, and other services. It also includes templates for Cleo Harmony, Kerio Control, GeoServer, WP Time Capsule, and Jenkins CLI.

Dec 23, 2024