pdnuclei-bot

Tweeting fresh CVE templates from @pdnuclei's Nuclei Templates repository. Stay updated with the latest security vulnerabilities and CVEs 🤖

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-30958 - high 🚨

OneUptime < 10.0.21 - Path Traversal

> OneUptime < 10.0.21 contains a path traversal caused by unsanitized componentName par...

👾 https://t.co/0g5vLhvQ90

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-10823 - high 🚨

YMC Filter WordPress - Unauthenticated Post Disclosure

> YMC Filter WordPress plugin < 3.11.3 contains a broken access control vulnerability c...

👾 https://t.co/azFKQRhpfy

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-8383 - medium 🚨

LearnPress < 4.3.7 - Information Disclosure

> LearnPress WordPress plugin < 4.3.7 contains an information disclosure vulnerability ...

👾 https://t.co/AuFaxS7fVA

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2025-29635 - high 🚨

D-Link DIR-823X set_prohibiting - Command Injection

> D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POS...

👾 https://t.co/5if5ZK33LZ

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-22778 - critical 🚨

vLLM 0.8.3 - 0.14.0 - Information Disclosure

> vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap ad...

👾 https://t.co/Hy554rShw3

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-34413 - critical 🚨

Xerte Online Toolkits <= 3.15 - Remote Code Execution

> Xerte Online Toolkits versions 3.15 and earlier expose the elFinder file manager conn...

👾 https://t.co/GVkP5zmrvi

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-52815 - low 🚨

Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure

> Gogs before version 0.14.3 contains an unauthenticated information disclosure vulnera...

👾 https://t.co/OGDrLyJUK9

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-28496 - critical 🚨

FOSSBilling - Server-Side Template Injection

> A Server-Side Template Injection (SSTI) vulnerability exists in FOSSBilling's templat...

👾 https://t.co/5Ebs8FneMu

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-47717 - high 🚨

FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure

> FUXA v1.3.0 exposes full SCADA/HMI project configuration via GET /api/project without...

👾 https://t.co/x4eoF3iLaQ

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-35273 - critical 🚨

Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE

> Oracle PeopleSoft PeopleTools 8.61 and 8.62 contain a remote code execution vulnerabi...

👾 https://t.co/7ssn1r217T

@pdnuclei #NucleiTe...

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-27826 - high 🚨

mcp-atlassian < 0.17.0 - Server-Side Request Forgery

> MCP Atlassian < 0.17.0 contains a server-side request forgery caused by improper vali...

👾 https://t.co/Ux0O5XOnsE

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-27760 - high 🚨

OpenCATS - Command Injection

> OpenCATS prior to commit 3002a29 contains a command injection caused by injection of ...

👾 https://t.co/bZuoH1flu2

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-31431 - high 🚨

Copy Fail - Linux Kernel Local Privilege Escalation via AF_ALG

> In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aea...

👾 https://t.co/Fy221yF1fL

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-25555 - critical 🚨

OpenBullet2 <= 0.3.2 - Authentication Bypass

> OpenBullet2 <= 0.3.2 contains an authentication bypass caused by improper API key aut...

👾 https://t.co/tMl199knYe

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-54069 - high 🚨

SiYuan Note <= 3.6.5 - Authentication Bypass

> SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth mid...

👾 https://t.co/JE4x8nkVLL

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-50751 - critical 🚨

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

> IKEv1 key exchange contains a broken authentication caused by logic flow weakness in ...

👾 https://t.co/qjr8qyT7dW

@pdnuclei #NucleiTemp...

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2025-61224 - medium 🚨

DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting

> DokuWiki 2025-05-14a 'Librarian' contains a stored XSS caused by improper sanitizatio...

👾 https://t.co/fJwP8V5m87

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2024-6569 - medium 🚨

Campaign Monitor for WordPress - Information Disclosure

> Campaign Monitor for WordPress plugin for WordPress versions up to 2.8.15 contains a ...

👾 https://t.co/bbKt4E3kSM

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-10795 - high 🚨

UpdraftPlus WP Backup & Migration Plugin - Authentication Bypass

> UpdraftPlus WP Backup & Migration Plugin for WordPress <= 1.26.4 contains an authenti...

👾 https://t.co/yqARL7T3CZ

@pdnuclei #NucleiTemplates #cve

[pdnuclei-bot @pdnuclei_bot]

🚨 CVE-2026-27833 - high 🚨

Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API

> Piwigo <= 16.3.0 contains an information disclosure vulnerability caused by the pwg.h...

👾 https://t.co/nN5UCTYvw9

@pdnuclei #NucleiTemplat...