Security Advisory

CVE-2026-41282

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-20 07:10:30

Last updated 2026-04-21 00:59:19

Assigner mitre

CVSS score 4.0

State PUBLISHED

Description

ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration).

← Browse all CVEs View on cve.org ↗