Go/github.com/projectdiscovery/nuclei/v3 CVE-2026-76803: medium 5.3, EPSS 0.40%

Nuclei: Local File Read via MySQL Client Sandbox Bypass

Action: Upgrade github.com/projectdiscovery/nuclei/v3 to 3.10.0 or later.

go get github.com/projectdiscovery/nuclei/v3@v3.10.0

Affected

Fixed versions

Sources

• osv: GHSA-xhmx-w2j4-rw3q
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-xhmx-w2j4-rw3q
• https://nvd.nist.gov/vuln/detail/CVE-2026-76803
• https://github.com/projectdiscovery/nuclei/pull/7473
• https://github.com/projectdiscovery/nuclei/commit/9611926a9a1ca99e8ed554d1b26fbeff60e06368
• https://github.com/projectdiscovery/nuclei
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76803 · published 2026-09-22T20:37:19Z · modified 2026-10-01T20:55:40.998528964Z · JSON