CVE-2026-41282 - ProjectDiscovery Nuclei DSL Expression Injection Vulnerability
CVE ID :CVE-2026-41282 Published : April 20, 2026, 8:16 a.m. | 26 minutes ago Description :ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untrusted targets (not the default configuration). Severity: 4.0
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] Attackers Exploit DVR Command Injection Flaw to Deploy Mirai-Based Botnet
- [CYBER] I Left Web3 in 2022. I Returned to an AI Security Crisis.
- [CYBER] What we know about the US capture of Iranian vessel near Hormuz
- [CYBER] Action vs cyber libel must be made within 1 year, not 15 years — SC
- [CYBER] Morning Minute: DeFi's Future in Question After $292M KelpDAO Exploit
- [CYBER] Morning Minute: DeFi's Future in Question After $292M KelpDAO Exploit