Sync nuclei templates 2026-10-12 🤖

README.md

@@ -1,8 +1,8 @@
 <div align="center">
 
-<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=174050-84604-1230" alt="PoC Index" width="100%"></a>
+<a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/main/docs/hero.svg?v=174052-84606-1230" alt="PoC Index" width="100%"></a>
 
-[![last sync](https://img.shields.io/badge/last%20sync-12%20Oct%202026%2012%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610121208)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C604-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610121208)](https://github.com/0xMarcio/pocindex/stargazers)
+[![last sync](https://img.shields.io/badge/last%20sync-12%20Oct%202026%2012%3A08%20UTC-2f81f7?style=flat-square&labelColor=161b22)](https://github.com/0xMarcio/pocindex/commits/main)&nbsp;[![CI](https://img.shields.io/github/actions/workflow/status/0xMarcio/pocindex/hot_cves.yml?style=flat-square&label=CI&color=2f81f7&labelColor=161b22&_=202610121208)](https://github.com/0xMarcio/pocindex/actions/workflows/hot_cves.yml)&nbsp;[![CVEs with PoCs](https://img.shields.io/badge/CVEs%20with%20PoCs-84%2C606-2f81f7?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![known exploited](https://img.shields.io/badge/known%20exploited-1%2C230-f85149?style=flat-square&labelColor=161b22)](https://pocindex.io/)&nbsp;[![stars](https://img.shields.io/github/stars/0xMarcio/pocindex?style=flat-square&label=stars&color=e3b341&labelColor=161b22&_=202610121208)](https://github.com/0xMarcio/pocindex/stargazers)
 
 <a href="https://pocindex.io/"><img src="https://raw.githubusercontent.com/0xMarcio/pocindex/8dec6181e823d641132e0ee8a52a1612c2b5dd37/docs/search.svg" alt="Search PoC Index" width="100%"></a>
 

cves/2026/CVE-2026-12609.md

@@ -0,0 +1,20 @@
+### [CVE-2026-12609](https://www.cve.org/CVERecord?id=CVE-2026-12609)
+![](https://img.shields.io/static/v1?label=Vendor&message=Eclipse%20Foundation&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=Eclipse%20Theia&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=1.66.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-22&color=brightgreen)
+
+### Description
+
+In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTTP endpoint, which resolves the requested file path with `path.resolve(localPath, filePath)` without verifying that the resolved path stays within the plugin's directory. An unauthenticated network attacker can send percent-encoded `../` sequences (`%2e%2e%2f`) that decode into the path parameter and escape the plugin directory, allowing arbitrary files readable by the Theia backend process to be retrieved. Plugin IDs are derived deterministically from a plugin's publisher and name, so built-in plugins serve as reliable anchors that require no prior knowledge of the target system.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12609.yaml

cves/2026/CVE-2026-26077.md

@@ -0,0 +1,23 @@
+### [CVE-2026-26077](https://www.cve.org/CVERecord?id=CVE-2026-26077)
+**Discourse doesn't ensure webhooks require a token**
+![](https://img.shields.io/static/v1?label=Vendor&message=discourse&color=blue)
+![](https://img.shields.io/static/v1?label=Product&message=discourse&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=%3C%202025.12.2&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%202026.1.0-latest%2C%20%3C%202026.1.1&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=%3E%3D%202026.2.0-latest%2C%20%3C%202026.2.0&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-287%3A%20Improper%20Authentication&color=brightgreen)
+
+### Description
+
+Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints (SendGrid, Mailjet, Mandrill, Postmark, SparkPost) in the `WebhooksController` accepted requests without a valid authentication token when no token was configured. This allowed unauthenticated attackers to forge webhook payloads and artificially inflate user bounce scores, potentially causing legitimate user emails to be disabled. The Mailpace endpoint had no token validation at all. Starting in versions 2025.12.2, 2026.1.1, and 2026.2.0, all webhook endpoints reject requests with a 406 response when no authentication token is configured. As a workaround, ensure that webhook authentication tokens are configured for all email provider integrations in site settings (e.g., `sendgrid_verification_key`, `mailjet_webhook_token`, `postmark_webhook_token`, `sparkpost_webhook_token`). There's no current workaround for mailpace before getting this fix.
+
+### POC
+
+#### Reference
+No PoCs from references.
+
+#### Github
+No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26077.yaml

cves/2026/CVE-2026-27604.md

@@ -19,3 +19,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ivanesk315/CVE-2026-28496
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27604.yaml

docs/hero.svg

@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1200" height="180" viewBox="0 0 1200 180"
-     role="img" aria-label="PoC Index, 84,604 CVEs with public proof-of-concept exploits">
+     role="img" aria-label="PoC Index, 84,606 CVEs with public proof-of-concept exploits">
   <clipPath id="card"><rect x="1" y="1" width="1198" height="178" rx="12"/></clipPath>
   <rect x="0.5" y="0.5" width="1199" height="179" rx="12" fill="#0d1117" stroke="#30363d"/>
   <g clip-path="url(#card)" opacity="0.6"><g>
@@ -19,10 +19,10 @@
   <text x="56" y="132" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="15" fill="#2f81f7">pocindex.io</text>
 
   <text x="620" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">174,050</text>
+        fill="#e6edf3" letter-spacing="-0.5">174,052</text>
   <text x="620" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
         fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="840" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">84,604</text>
+        fill="#2f81f7" letter-spacing="-0.5">84,606</text>
   <text x="840" y="117" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="12"
         fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="1010" y="96" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="34" font-weight="700"
         fill="#f85149" letter-spacing="-0.5">1,230</text>

docs/social-card.svg

@@ -20,10 +20,10 @@
 
   <rect x="96" y="344" width="1088" height="1" fill="#30363d"/>
   <text x="96" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#e6edf3" letter-spacing="-0.5">174,050</text>
+        fill="#e6edf3" letter-spacing="-0.5">174,052</text>
   <text x="96" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
         fill="#6e7681" letter-spacing="1.6">CVES INDEXED</text><text x="500" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
-        fill="#2f81f7" letter-spacing="-0.5">84,604</text>
+        fill="#2f81f7" letter-spacing="-0.5">84,606</text>
   <text x="500" y="459" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="16"
         fill="#6e7681" letter-spacing="1.6">WITH POCS</text><text x="880" y="430" font-family="ui-monospace,SFMono-Regular,Menlo,Consolas,monospace" font-size="46" font-weight="700"
         fill="#f85149" letter-spacing="-0.5">1,230</text>

docs/stats.json

@@ -1,5 +1,5 @@
 {
  "kev": 1230,
- "total_cves": 174050,
- "with_pocs": 84604
+ "total_cves": 174052,
+ "with_pocs": 84606
 }

index/cve_dates.json

@@ -1 +1 @@
-{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0024":["1999-09-29","2026-10-09"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-Line truncated
+{"CVE-1999-0001":["2000-02-04","2024-08-01"],"CVE-1999-0002":["1999-09-29","2024-08-01"],"CVE-1999-0003":["1999-09-29","2024-08-01"],"CVE-1999-0004":["2000-02-04","2024-08-01"],"CVE-1999-0005":["1999-09-29","2024-08-01"],"CVE-1999-0006":["1999-09-29","2024-10-29"],"CVE-1999-0007":["1999-09-29","2024-08-01"],"CVE-1999-0009":["1999-09-29","2024-08-01"],"CVE-1999-0014":["1999-09-29","2024-08-01"],"CVE-1999-0015":["2000-02-04","2024-08-01"],"CVE-1999-0016":["1999-09-29","2025-03-17"],"CVE-1999-0018":["1999-09-29","2024-08-01"],"CVE-1999-0019":["1999-09-29","2024-08-01"],"CVE-1999-0021":["1999-09-29","2024-08-01"],"CVE-1999-0023":["1999-09-29","2024-08-01"],"CVE-1999-0024":["1999-09-29","2026-10-09"],"CVE-1999-0025":["1999-09-29","2024-08-01"],"CVE-1999-0026":["1999-09-29","2024-08-01"],"CVE-1999-0027":["1999-09-29","2024-08-01"],"CVE-1999-0028":["1999-09-29","2024-08-01"],"CVE-1999-0029":["1999-09-29","2024-10-29"],"CVE-1999-0030":["2000-02-04","2024-08-01"],"CVE-1999-0032":["1999-09-29","2024-08-01"],"CVE-1999-0034":["1999-09-29","2024-08-01"],"CVE-1999-0036":["1999-09-29","2024-10-29"],"CVE-1999-0038":["1999-09-29","2024-09-12"],"CVE-1999-0039":["1999-09-29","2024-09-12"],"CVE-1999-0040":["1999-09-29","2024-08-01"],"CVE-1999-0041":["1999-09-29","2024-09-17"],"CVE-1999-0042":["1999-09-29","2024-08-01"],"CVE-1999-0044":["1999-09-29","2024-08-01"],"CVE-1999-0045":["1999-09-29","2024-08-01"],"CVE-1999-0046":["1999-09-29","2024-08-01"],"CVE-1999-0050":["1999-09-29","2024-08-01"],"CVE-1999-0051":["1999-09-29","2024-08-01"],"CVE-1999-0060":["1999-09-29","2024-08-01"],"CVE-1999-0063":["1999-09-29","2024-08-01"],"CVE-1999-0064":["1999-09-29","2024-08-01"],"CVE-1999-0066":["1999-09-29","2024-08-01"],"CVE-1999-0067":["1999-09-29","2024-08-01"],"CVE-1999-0068":["1999-09-29","2024-08-01"],"CVE-1999-0069":["1999-09-29","2024-08-01"],"CVE-1999-0070":["1999-09-29","2024-08-01"],"CVE-1999-0077":["1999-09-29","2024-08-01"],"CVE-1999-0078":["2000-02-04","2024-08-01"],"CVE-1999-0082":["1999-09-29","2024-08-01"],"CVE-1999-0084":["1999-09-29","2024-08-01"],"CVE-1999-0088":["2000-02-04","2024-08-01"],"CVE-1999-0092":["2000-02-04","2024-08-01"],"CVE-1999-0095":["1999-09-29","2024-08-01"],"CVE-1999-0101":["2000-01-18","2024-08-01"],"CVE-1999-0103":["1999-09-29","2025-03-17"],"CVE-1999-0105":["2000-02-04","2024-08-01"],"CVE-1999-0107":["2000-02-04","2024-08-01"],"CVE-1999-0108":["1999-09-29","2024-08-01"],"CVE-1999-0109":["1999-09-29","2024-08-01"],"CVE-1999-0110":["2000-02-04","2005-02-04"],"CVE-1999-0112":["1999-09-29","2024-08-01"],"CVE-1999-0113":["1999-09-29","2024-08-01"],"CVE-1999-0115":["2001-05-07","2024-08-01"],"CVE-1999-0116":["1999-09-29","2024-08-01"],"CVE-1999-0118":["2000-06-02","2024-08-01"],"CVE-1999-0122":["1999-09-29","2024-08-01"],"CVE-1999-0125":["1999-09-29","2024-08-01"],"CVE-1999-0126":["1999-09-29","2024-08-01"],"CVE-1999-0128":["1999-09-29","2024-08-01"],"CVE-1999-0130":["1999-09-29","2024-08-01"],"CVE-1999-0137":["1999-09-29","2024-08-01"],"CVE-1999-0140":["2000-02-04","2024-08-01"],"CVE-1999-0144":["2000-02-04","2024-08-01"],"CVE-1999-0145":["2000-10-13","2024-08-01"],"CVE-1999-0146":["1999-09-29","2024-08-01"],"CVE-1999-0147":["1999-09-29","2024-08-01"],"CVE-1999-0148":["1999-09-29","2024-08-01"],"CVE-1999-0149":["1999-09-29","2024-08-01"],"CVE-1999-0153":["1999-09-29","2024-08-01"],"CVE-1999-0154":["2001-09-12","2024-08-01"],"CVE-1999-0156":["2000-02-04","2024-08-01"],"CVE-1999-0158":["1999-09-29","2024-08-01"],"CVE-1999-0162":["1999-09-29","2024-08-01"],"CVE-1999-0163":["2000-02-04","2024-08-01"],"CVE-1999-0165":["2000-02-04","2024-08-01"],"CVE-1999-0170":["1999-09-29","2024-08-01"],"CVE-1999-0173":["1999-09-29","2024-08-01"],"CVE-1999-0174":["1999-09-29","2024-08-01"],"CVE-1999-0175":["1999-09-29","2024-08-01"],"CVE-1999-0176":["1999-09-29","2024-08-01"],"CVE-1999-0178":["1999-09-29","2024-08-01"],"CVE-1999-0180":["1999-09-29","2024-08-01"],"CVE-1999-0182":["1999-09-29","2024-08-01"],"CVE-1999-0183":["1999-09-29","2024-08-01"],"CVE-1999-0191":["1999-09-29","2024-08-01"],"CVE-1999-0192":["1999-09-29","2024-08-01"],"CVE-1999-0193":["2000-02-04","2024-08-01"],"CVE-1999-0195":["2000-02-04","2024-08-01"],"CVE-1999-0196":["1999-09-29","2024-08-01"],"CVE-1999-0199":["2020-10-06","2024-08-01"],"CVE-1999-0201":["1999-09-29","2024-08-01"],"CVE-1999-0204":["1999-09-29","2024-08-01"],"CVE-1999-0206":["1999-09-29","2024-08-01"],"CVE-1999-0207":["1999-09-29","2024-08-01"],"CVE-1999-0208":["1999-09-29","2024-08-01"],"CVE-1999-0209":["1999-09-29","2024-08-01"],"CVE-1999-0210":["2000-06-02","2024-08-01"],"CVE-1999-0211":["1999-09-29","2024-08-01"],"CVE-1999-0215":["1999-09-29","2024-08-01"],"CVE-1999-0219":["1999-09-29","2024-08-01"],"CVE-1999-0220":["2000-02-04","2024-08-01"],"CVE-1999-0221":["1999-09-29","2024-08-01"],"CVE-1999-0224":["1999-09-29","2024-08-01"],"CVE-1999-0225":["2000-06-02","2024-08-01"],"CVE-1999-0232":["2000-02-04","2024-08-01"],"CVE-1999-0233":["2000-01-18","2024-08-01"],"CVE-1999-0235":["2000-02-Line truncated

index/cve_record_state.json

@@ -1 +1 @@
-{"CVE-1999-0110":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0335":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0531":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0192":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2003-0090":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0122":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0153":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2005-1032":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2116":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2303":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-4633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-3866":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-4216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-1570":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-5125":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-2737":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4042":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4112":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4189":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4270":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6049":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0300":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0795":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-2259":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-0368":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2010-2782":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2010-2972":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-3885":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-0108":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-1656":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2011-2553":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2011-3633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-4779":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-5232":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-0722":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-1300":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1304":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1305":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1309":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1913":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2344":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2765":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-3539":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-4748":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-4749":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-6315":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-6679":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2013-1298":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-1625":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2013-1805":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-2649":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2013-2749":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-3130":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-4266":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5575":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5581":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5621":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5622":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5623":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5624":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5625":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5627":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5630":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5632":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5689":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5759":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-0982":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1004":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1137":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1155":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1470":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2239":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2014-2923":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2014-2937":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2Line truncated
+{"CVE-1999-0110":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0335":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0531":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0192":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2003-0090":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0122":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0153":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2005-1032":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2116":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2303":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-4633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-3866":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-4216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-1570":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-5125":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-2737":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4042":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4112":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4189":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4270":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6049":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0300":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0795":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-2259":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-0368":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2010-2782":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2010-2972":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-3885":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-0108":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-1656":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2011-2553":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2011-3633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-4779":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-5232":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-0722":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-1300":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1304":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1305":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1309":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-1913":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2344":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2765":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-3539":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-4748":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-4749":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2012-6315":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-6679":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2013-1298":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-1625":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2013-1805":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-2649":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2013-2749":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-3130":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-4266":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5575":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5581":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5621":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5622":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5623":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5624":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5625":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5627":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5630":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5632":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5689":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5759":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-0982":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1004":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1137":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1155":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1470":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2239":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2014-2923":{"checked":"2026-10-11","status":"UNAVAILABLE"},"CVE-2014-2937":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2Line truncated

index/nuclei.json

@@ -32849,6 +32849,14 @@
 "severity": "low",
 "url": "https://github.com/topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2026/CVE-2026-12536-fusion_builder-6199b852-3270-4456-934b-68c3ef11b9e5.yaml"
 },
+"CVE-2026-12609": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"name": "Eclipse Theia - Unauthenticated Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12609.yaml"
+},
 "CVE-2026-1277": {
 "cvss": 4.7,
 "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
@@ -33599,6 +33607,14 @@
 "severity": "critical",
 "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25895.yaml"
 },
+"CVE-2026-26077": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+"cwe": "CWE-306",
+"name": "Discourse - Unauthenticated Mailpace Webhook Bounce-Score Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26077.yaml"
+},
 "CVE-2026-2614": {
 "cvss": 7.5,
 "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
@@ -33708,6 +33724,12 @@
 "severity": "critical",
 "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27542.yaml"
 },
+"CVE-2026-27604": {
+"cwe": "CWE-862",
+"name": "FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27604.yaml"
+},
 "CVE-2026-27645": {
 "cvss": 6.1,
 "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",

index/releases/2026.json

@@ -1641,6 +1641,7 @@
 "CVE-2026-12585 https://wpscan.com/vulnerability/c94475c8-d129-4735-b599-5094efb20cb8":{"basis":"unknown","cve":"CVE-2026-12585","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/c94475c8-d129-4735-b599-5094efb20cb8/"},
 "CVE-2026-12586 https://wpscan.com/vulnerability/84555dc3-b35e-478f-b681-ea0a0fe481d9":{"basis":"unknown","cve":"CVE-2026-12586","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/84555dc3-b35e-478f-b681-ea0a0fe481d9/"},
 "CVE-2026-12592 https://wpscan.com/vulnerability/3658cae6-f6ae-4ecc-8d74-bb402e61f5d5":{"basis":"unknown","cve":"CVE-2026-12592","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/3658cae6-f6ae-4ecc-8d74-bb402e61f5d5/"},
+"CVE-2026-12609 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12609.yaml?#":{"basis":"unknown","cve":"CVE-2026-12609","released":null,"seen":"2026-10-12T12:15:25Z","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12609.yaml"},
 "CVE-2026-12673 https://projectblack.io/blog/liquidfiles-privilege-escalation":{"basis":"unknown","cve":"CVE-2026-12673","imported":true,"released":null,"url":"https://projectblack.io/blog/liquidfiles-privilege-escalation/"},
 "CVE-2026-12684 https://wpscan.com/vulnerability/169d3455-dd98-4b0b-b6c1-6c9c28aa9707":{"basis":"unknown","cve":"CVE-2026-12684","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/169d3455-dd98-4b0b-b6c1-6c9c28aa9707/"},
 "CVE-2026-12685 https://wpscan.com/vulnerability/0e5f5730-167d-4853-a764-bb9e3d62fdc4":{"basis":"unknown","cve":"CVE-2026-12685","imported":true,"released":null,"url":"https://wpscan.com/vulnerability/0e5f5730-167d-4853-a764-bb9e3d62fdc4/"},
@@ -4601,6 +4602,7 @@
 "CVE-2026-26030 github:mbanyamer/cve-2026-26030-microsoft-semantic-kernel-1.39.4-rce?#":{"basis":"unknown","cve":"CVE-2026-26030","imported":true,"released":null,"url":"https://github.com/mbanyamer/CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE"},
 "CVE-2026-26055 github:advisories/ghsa-965m-v4cc-6334?#":{"basis":"unknown","cve":"CVE-2026-26055","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-965m-v4cc-6334"},
 "CVE-2026-26056 github:advisories/ghsa-wj8p-jj64-h7ff?#":{"basis":"unknown","cve":"CVE-2026-26056","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-wj8p-jj64-h7ff"},
+"CVE-2026-26077 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26077.yaml?#":{"basis":"unknown","cve":"CVE-2026-26077","released":null,"seen":"2026-10-12T12:15:25Z","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26077.yaml"},
 "CVE-2026-26111 github:dhananjayasj/rras-vulnerability-cve-2026-25172-cve-2026-25173-cve-2026--26111?#":{"basis":"unknown","cve":"CVE-2026-26111","imported":true,"released":null,"url":"https://github.com/Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111"},
 "CVE-2026-26114 github:huynambka/cve-2026-26114-poc?#":{"basis":"unknown","cve":"CVE-2026-26114","imported":true,"released":null,"url":"https://github.com/huynambka/cve-2026-26114-poc"},
 "CVE-2026-26119 github:cyb3rwitch3r/cve-2026-26119?#":{"basis":"unknown","cve":"CVE-2026-26119","imported":true,"released":null,"url":"https://github.com/Cyb3rWitch3r/CVE-2026-26119"},
@@ -4802,6 +4804,7 @@
 "CVE-2026-27598 github:advisories/ghsa-6v48-fcq6-ff23?#":{"basis":"unknown","cve":"CVE-2026-27598","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-6v48-fcq6-ff23"},
 "CVE-2026-27599 github:advisories/ghsa-66m2-v9v9-95c3?#":{"basis":"unknown","cve":"CVE-2026-27599","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-66m2-v9v9-95c3"},
 "CVE-2026-27604 github:ivanesk315/cve-2026-28496?#":{"basis":"unknown","cve":"CVE-2026-27604","imported":true,"released":null,"url":"https://github.com/ivanesk315/CVE-2026-28496"},
+"CVE-2026-27604 github:projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27604.yaml?#":{"basis":"unknown","cve":"CVE-2026-27604","released":null,"seen":"2026-10-12T12:15:25Z","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27604.yaml"},
 "CVE-2026-27606 github:advisories/ghsa-mw96-cpmx-2vgc?#":{"basis":"unknown","cve":"CVE-2026-27606","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-mw96-cpmx-2vgc"},
 "CVE-2026-27611 github:advisories/ghsa-8vrh-3pm2-v4v6?#":{"basis":"unknown","cve":"CVE-2026-27611","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-8vrh-3pm2-v4v6"},
 "CVE-2026-27614 github:advisories/ghsa-vp6q-7m36-pq3w?#":{"basis":"unknown","cve":"CVE-2026-27614","imported":true,"released":null,"url":"https://github.com/advisories/GHSA-vp6q-7m36-pq3w"},