Go/github.com/projectdiscovery/nuclei/v2 CVE-2026-76803: unknown, EPSS 0.40%
Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-6577#Go/github.com/projectdiscovery/nuclei/v2
- https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-xhmx-w2j4-rw3q
- https://nvd.nist.gov/vuln/detail/CVE-2026-76803
- https://github.com/projectdiscovery/nuclei/commit/9611926a9a1ca99e8ed554d1b26fbeff60e06368
- https://github.com/projectdiscovery/nuclei/pull/7473
- https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0
CVE-2026-76803 · published · modified · JSON