## projectdiscovery/nuclei-templates — v10.4.8…v10.4.9

_776+ commits._

### Features
- **Add CVE-2026-61736 template (#17197)** (fb166e5)
- **Add CVE-2026-26265 template (#17216)** (a227518)
- **Add CVE-2026-58191 template (#17226)** (e5d7ee0)
- **Add CVE-2025-57231 - Docmost 0.21.0 - Unauthenticated File Path Traversal (#17230)** (abc9fa3)
- **Add files via upload** (7194fc1)
- **Add files via upload** (10ffde3)
- **Add cve-search CVE-2026-59509 template** (9211668)
- **Add CVE-2026-59177 template** (d637ace)
- **Add CVE-2026-27454 template** (7dea8b7)
- **Add CVE-2026-28141 template** (49ce6e3)
- **Add CVE-2026-30849 template (#17201)** (2e8cfda)

### Fixes
- **Merge pull request #17258 from projectdiscovery/fix/re-sign-after-metadata-updates** (893122f)
- **Merge pull request #17235 from diedromeo/fix/CVE-2018-3760-detection-fix** (d0ce36f)
- **Merge branch 'main' into fix/CVE-2018-3760-detection-fix** (27478bd)
- **Merge pull request #17236 from diedromeo/fix/CVE-2021-34429-path-duplication** (6dad550)
- **Merge pull request #17025 from darses/patch-58** (882a2fb)
- **Merge pull request #17242 from projectdiscovery/DhiyaneshGeek-patch-2** (bcc1739)
- **fix: rewrite templates to use raw requests, DSL matchers, and proper metadata** (85f7db7)
- **fix(CVE-2021-34429): replace unsafe with disable-path-automerge to fix path duplication** (59a92ad)
- **fix(CVE-2018-3760): fix broken detection with disable-path-automerge and flow** (b5b0595)

### Backend
- **Re-sign templates after EPSS and KEV metadata updates** (15a201d)
- **Merge pull request #17234 from comradezephyr/main** (4c0984a)
- **Remove extra newline in CVE-2018-3760.yaml** (0fc615d)
- **Merge pull request #17247 from projectdiscovery/arangodb-auth-bypass-encoded-underscore** (9543290)
- **Merge pull request #17251 from projectdiscovery/CVE-2026-27960** (d813a6a)
- **Merge branch 'main' into main** (dc0fda6)
- **Merge pull request #17250 from projectdiscovery/CVE-2026-0768** (cc70d15)
- **Merge pull request #17249 from projectdiscovery/CVE-2026-59726** (862bbaa)
- **Merge pull request #17245 from projectdiscovery/CVE-2026-5524** (e62559e)
- **Merge pull request #17243 from projectdiscovery/CVE-2026-1281** (c7be50c)
- **Merge pull request #17229 from str4k3r/codex/cve-2026-59509** (211ad24)
- **Merge pull request #17225 from str4k3r/str4k3r/cve-2026-59177** (dc18055)
- **Merge pull request #17215 from str4k3r/str4k3r/cve-2026-27454** (70e87f6)
- **Merge pull request #17207 from str4k3r/str4k3r/cve-2026-28141** (3d39364)
- **Merge pull request #17198 from str4k3r/str4k3r/cve-2026-29963** (13c9bbc)
- **Merge pull request #17252 from projectdiscovery/CVE-2026-62382** (d015442)
- **CVE-2026-62382 - PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass** (3478457)
- **Create CVE-2026-85200.yaml (#17248)** (5d95676)
- **Create CVE-2026-88062.yaml (#17246)** (263209c)
- **Update CVE-2026-27960.yaml** (9f42eee)
- **CVE-2026-27960 - OpenCTI <6.9.13 - Authentication Bypass via User Impersonation** (9e2f9af)
- **CVE-2026-0768 - Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code** (c4b0b64)
- **CVE-2026-59726 - ruflo MCP Bridge - Unauthenticated RCE via terminal_execute** (bc616c1)
- **ArangoDB - Authentication Bypass via URL-Encoded Underscore (%5f) to RCE** (4cfb167)
- **Delete http/exposures/apis/ray-dashboard-exposure.yaml** (e2bbc7c)
- **Delete http/exposures/apis/qdrant-api-exposure.yaml** (99abbc1)
- **Refactor CVE-2026-59509.yaml for clarity and consistency** (dfeafe4)
- **Update CVE-2026-27454.yaml** (c117bdf)
- **Update CVE-2026-27454.yaml** (9c159bb)
- **Update CVE-2026-27454.yaml** (42fdfa0)
- **Update CVE-2026-59177.yaml** (55aa5eb)
- **Revise CVE-2026-81578 YAML details** (64cec83)
- **CVE-2026-5524 - Divi Form Builder <=5.1.8 - Unauthenticated Arbitrary File Upload RCE** (5c35d83)
- **Update CVE-2026-1281.yaml** (36e4b0f)
- **CVE-2026-1281 - Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection** (43d9846)
- **CVE-2026-41948 - Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal** (e36aef3)
- **Create CVE-2026-34234.yaml (#17193)** (5d042ae)
- **Merge pull request #17195 from christianfl/cve-2026-5562** (e61ba88)
- **CVE-2026-85706 - GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read (#17231)** (20ff5a6)
- **Update CVE-2026-28141.yaml** (affb727)
- **Update CVE-2026-28141.yaml** (93106c7)
- **Strengthen CVE-2026-28141 matcher** (91ae7df)
- **Revise remediation for CVE-2026-5562** (8119268)

### Chore
- **chore: generate templates checksum 🤖** (3972b78)
- **chore: sign templates 🤖** (4ced1ac)
- **chore: update KEV and vKEV tags and metadata 🤖** (db04474)
- **chore: update EPSS scores 🤖** (70b8e3b)
- **chore: generate templates checksum 🤖** (6175b04)
- **chore: generate new addition list 🤖** (62e5930)
- **chore: sign templates 🤖** (ef30dfd)
- **chore: generate templates checksum 🤖** (9cab5e4)
- **chore: generate new addition list 🤖** (5a6d8b6)
- **chore: generate new addition list 🤖** (ca1557d)
- **chore: sign templates 🤖** (eb58801)
- **chore: generate CVEs metadata 🤖** (3b9bc0b)
- **chore: sign templates 🤖** (e37667c)
- **chore: generate templates checksum 🤖** (26219f2)
- **chore: generate new addition list 🤖** (d3016d1)
- **chore: generate new addition list 🤖** (3da25f5)
- **chore: generate new addition list 🤖** (6f6d723)
- **chore: generate CVEs metadata 🤖** (c79c1bd)
- **chore: sign templates 🤖** (bf97da3)
- **chore: generate new addition list 🤖** (fee8c94)
- **chore: generate templates checksum 🤖** (2e6a38c)
- **chore: generate CVEs metadata 🤖** (6f8ea44)
- **chore: sign templates 🤖** (c803df1)
- **chore: generate new addition list 🤖** (b0500d6)
- **chore: sign templates 🤖** (5e2caa0)
- **chore: generate templates checksum 🤖** (9f58425)
- **chore: generate new addition list 🤖** (1d489a0)
- **chore: generate CVEs metadata 🤖** (3946ada)
- **chore: sign templates 🤖** (fe0b3e0)
- **chore: generate new addition list 🤖** (38036d6)
- **chore: generate CVEs metadata 🤖** (2b09d45)
- **chore: sign templates 🤖** (3c6b2b9)
- **chore: generate new addition list 🤖** (ebc8faf)
- **chore: generate new addition list 🤖** (6cf64f5)
- **chore: generate CVEs metadata 🤖** (9979c23)
- **chore: sign templates 🤖** (55b0c49)
- **chore: generate CVEs metadata 🤖** (c482dd1)
- **chore: sign templates 🤖** (276a344)
- **chore: generate templates checksum 🤖** (254d105)
- **chore: generate new addition list 🤖** (0f36ed8)
- **chore: generate CVEs metadata 🤖** (33c53c8)
- **chore: sign templates 🤖** (0a693f5)
- **chore: generate templates checksum 🤖** (b8b54c0)
- **chore: generate new addition list 🤖** (792af93)
- **chore: generate new addition list 🤖** (f5e0e79)
- **chore: generate CVEs metadata 🤖** (ab90ee7)
- **chore: sign templates 🤖** (361d3ae)
- **chore: update KEV and vKEV tags and metadata 🤖** (f22cdc7)
- **chore: update EPSS scores 🤖** (3e30f83)
- **chore: generate templates checksum 🤖** (eba6025)
- **chore: generate new addition list 🤖** (dc7ac10)
- **chore: generate CVEs metadata 🤖** (b349674)
- **chore: sign templates 🤖** (e3c00d7)
- **chore: generate templates checksum 🤖** (cb1b18c)
- **chore: generate new addition list 🤖** (2bac3b6)
- **chore: sign templates 🤖** (1c6fef8)
- **chore: generate templates checksum 🤖** (6fbcd30)
- **chore: generate new addition list 🤖** (d6441c0)
- **chore: generate CVEs metadata 🤖** (11af6fa)
- **chore: sign templates 🤖** (8a3d295)
- **chore: generate templates checksum 🤖** (fcd9446)
- **chore: generate new addition list 🤖** (745a1d8)
- **chore: generate CVEs metadata 🤖** (2173904)
- **chore: sign templates 🤖** (ea65cb9)
- **chore: generate templates checksum 🤖** (7221661)
- **chore: generate new addition list 🤖** (d3c9c82)
- **chore: generate CVEs metadata 🤖** (f38cb85)
- **chore: sign templates 🤖** (9febe43)
- **chore: generate new addition list 🤖** (9c7e6bf)
- **chore: generate CVEs metadata 🤖** (2f175dd)
- **chore: generate templates checksum 🤖** (e77baf7)
- **chore: generate new addition list 🤖** (afb6606)
- **chore: generate CVEs metadata 🤖** (936fcc5)
- **chore: sign templates 🤖** (b1cee66)
- **chore: update EPSS scores 🤖** (823ebcc)
- **chore: generate templates checksum 🤖** (0cb51d4)
- **chore: generate new addition list 🤖** (0ee7791)
- **chore: generate CVEs metadata 🤖** (571b86f)
- **chore: sign templates 🤖** (31366ff)
- **chore: update KEV and vKEV tags and metadata 🤖** (a2a1b8d)
- **chore: update EPSS scores 🤖** (fffd424)
- **chore: update KEV and vKEV tags and metadata 🤖** (8e20045)
- **chore: update EPSS scores 🤖** (94d48ce)
- **chore: generate templates checksum 🤖** (502ecb8)
- **chore: generate new addition list 🤖** (68fafb3)
- **chore: generate CVEs metadata 🤖** (18a8c4a)
- **chore: sign templates 🤖** (d98acae)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/projectdiscovery/nuclei-templates?utm_source=github-action)._