diff --git a/README.md b/README.md
index 60a7132d51a..7d926b10e3c 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
-

+

-[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)
+[](https://github.com/0xMarcio/pocindex/commits/main) [](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml) [](https://pocindex.io/) [](https://pocindex.io/) [](https://github.com/0xMarcio/pocindex/stargazers)

diff --git a/cves/2026/CVE-2026-29962.md b/cves/2026/CVE-2026-29962.md
new file mode 100644
index 00000000000..b4d053b9e83
--- /dev/null
+++ b/cves/2026/CVE-2026-29962.md
@@ -0,0 +1,19 @@
+### [CVE-2026-29962](https://www.cve.org/CVERecord?id=CVE-2026-29962)
+
+
+
+
+### Description
+
+HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths. The endpoint /vendor/phpunit/phpunit.php processes user-controlled parameters that directly affect file access operations without adequate validation, sanitization, or path restriction. This allows a remote attacker to exploit Path Traversal techniques to read arbitrary files from the underlying operating system and application directories, leading to sensitive information disclosure.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29962.yaml
diff --git a/cves/2026/CVE-2026-30849.md b/cves/2026/CVE-2026-30849.md
index b340d0b2384..387e5b85115 100644
--- a/cves/2026/CVE-2026-30849.md
+++ b/cves/2026/CVE-2026-30849.md
@@ -17,3 +17,6 @@ No PoCs from references.
#### Github
- https://github.com/Gumbraise/CVE-2026-30849-PoC
- https://github.com/JBince/vulnerability-research
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30849.yaml
diff --git a/cves/2026/CVE-2026-41456.md b/cves/2026/CVE-2026-41456.md
index 72a30620422..7cefdf26b56 100644
--- a/cves/2026/CVE-2026-41456.md
+++ b/cves/2026/CVE-2026-41456.md
@@ -19,3 +19,6 @@ No PoCs found on GitHub currently.
#### ExploitDB
- https://www.exploit-db.com/exploits/52678
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41456.yaml
diff --git a/cves/2026/CVE-2026-41679.md b/cves/2026/CVE-2026-41679.md
index 720a9275e21..7c63d283db7 100644
--- a/cves/2026/CVE-2026-41679.md
+++ b/cves/2026/CVE-2026-41679.md
@@ -22,3 +22,6 @@ No PoCs from references.
#### Metasploit
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paperclipai_unauth_rce_cve_2026_41679.rb
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41679.yaml
diff --git a/cves/2026/CVE-2026-48558.md b/cves/2026/CVE-2026-48558.md
index 25686d9daa8..59f2e2904d8 100644
--- a/cves/2026/CVE-2026-48558.md
+++ b/cves/2026/CVE-2026-48558.md
@@ -21,3 +21,6 @@ SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an aut
#### Metasploit
- https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/simplehelp_oidc_auth_bypass_rce.rb
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48558.yaml
diff --git a/cves/2026/CVE-2026-53595.md b/cves/2026/CVE-2026-53595.md
index e131b8ae060..450c0f7d991 100644
--- a/cves/2026/CVE-2026-53595.md
+++ b/cves/2026/CVE-2026-53595.md
@@ -18,3 +18,6 @@ No PoCs from references.
#### Github
- https://github.com/0xdak/CVE-2026-53595_exploit
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53595.yaml
diff --git a/cves/2026/CVE-2026-58123.md b/cves/2026/CVE-2026-58123.md
new file mode 100644
index 00000000000..8999e9b4afe
--- /dev/null
+++ b/cves/2026/CVE-2026-58123.md
@@ -0,0 +1,21 @@
+### [CVE-2026-58123](https://www.cve.org/CVERecord?id=CVE-2026-58123)
+**Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API**
+
+
+
+
+
+### Description
+
+Hermes WebUI before 0.51.788 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by accessing the embedded terminal API endpoints without credentials. Attackers can create a session, attach a PTY shell, and write arbitrary commands through the terminal input endpoint to achieve full command execution as the server process user via four sequential unauthenticated HTTP requests.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58123.yaml
diff --git a/cves/2026/CVE-2026-82222.md b/cves/2026/CVE-2026-82222.md
index eb45b84d407..76006b967ba 100644
--- a/cves/2026/CVE-2026-82222.md
+++ b/cves/2026/CVE-2026-82222.md
@@ -23,3 +23,6 @@ No PoCs from references.
- https://github.com/0xCyp1337/CVE-2026-82222-MassExploit
- https://github.com/GhostlyrootB2H/CVE-2026-82222
- https://github.com/sajjadsiam/CVE-2026-82222-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-82222.yaml
diff --git a/cves/2026/CVE-2026-8467.md b/cves/2026/CVE-2026-8467.md
index 3382f213670..f9d6c0a06ab 100644
--- a/cves/2026/CVE-2026-8467.md
+++ b/cves/2026/CVE-2026-8467.md
@@ -21,3 +21,6 @@ This issue affects phoenix_storybook from 0.5.0 before 1.1.0.
#### Github
- https://github.com/HORKimhab/CVE-2026-8467
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-8467.yaml
diff --git a/docs/hero.svg b/docs/hero.svg
index 0b17c651b8f..563ad4bbc06 100644
--- a/docs/hero.svg
+++ b/docs/hero.svg
@@ -1,5 +1,5 @@