CVE-2026-76803

Go/github.com/projectdiscovery/nuclei/v3 CVE-2026-76803: medium 5.3, EPSS 0.40%

Nuclei: Local File Read via MySQL Client Sandbox Bypass

Action: Upgrade github.com/projectdiscovery/nuclei/v3 to 3.10.0 or later.

go get github.com/projectdiscovery/nuclei/v3@v3.10.0

Affected

Fixed versions

Sources

• osv: GHSA-xhmx-w2j4-rw3q
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-xhmx-w2j4-rw3q
• https://nvd.nist.gov/vuln/detail/CVE-2026-76803
• https://github.com/projectdiscovery/nuclei/pull/7473
• https://github.com/projectdiscovery/nuclei/commit/9611926a9a1ca99e8ed554d1b26fbeff60e06368
• https://github.com/projectdiscovery/nuclei
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76803 · published 2026-09-22T20:37:19Z · modified 2026-10-01T20:55:40.998528964Z · JSON

Go/github.com/projectdiscovery/nuclei CVE-2026-76803: unknown, EPSS 0.40%

Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6577
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-xhmx-w2j4-rw3q
• https://nvd.nist.gov/vuln/detail/CVE-2026-76803
• https://github.com/projectdiscovery/nuclei/commit/9611926a9a1ca99e8ed554d1b26fbeff60e06368
• https://github.com/projectdiscovery/nuclei/pull/7473
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76803 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:45:16.187207915Z · JSON

Go/github.com/projectdiscovery/nuclei/v2 CVE-2026-76803: unknown, EPSS 0.40%

Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6577#Go/github.com/projectdiscovery/nuclei/v2
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-xhmx-w2j4-rw3q
• https://nvd.nist.gov/vuln/detail/CVE-2026-76803
• https://github.com/projectdiscovery/nuclei/commit/9611926a9a1ca99e8ed554d1b26fbeff60e06368
• https://github.com/projectdiscovery/nuclei/pull/7473
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76803 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:45:16.187207915Z · JSON

Go/github.com/projectdiscovery/nuclei/v3 CVE-2026-76803: unknown, EPSS 0.40%

Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei

Action: Upgrade github.com/projectdiscovery/nuclei/v3 to 3.10.0 or later.

go get github.com/projectdiscovery/nuclei/v3@v3.10.0

Affected

Fixed versions

Sources

• osv: GO-2026-6577#Go/github.com/projectdiscovery/nuclei/v3
• https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-xhmx-w2j4-rw3q
• https://nvd.nist.gov/vuln/detail/CVE-2026-76803
• https://github.com/projectdiscovery/nuclei/commit/9611926a9a1ca99e8ed554d1b26fbeff60e06368
• https://github.com/projectdiscovery/nuclei/pull/7473
• https://github.com/projectdiscovery/nuclei/releases/tag/v3.10.0

CVE-2026-76803 · published 2026-10-01T20:23:38Z · modified 2026-10-01T20:45:16.187207915Z · JSON