Template Signature Bypass in Nuclei by ProjectDiscovery

CVE-2026-92718

What is CVE-2026-92718?

Nuclei versions prior to 3.11.1 exhibit a vulnerability where template signature verification relies solely on file modification time, neglecting to validate content checksums. This allows attackers to substitute legitimate templates with unsigned malicious variants, manipulating the modification time to evade signature checks. As a result, attackers can execute arbitrary operating system commands, putting systems at significant risk.

References