Am I actually vulnerable?
Type a CVE ID and get the exact check to run against your own systems: a Nuclei command, or the OpenVAS NVT with a GMP query that confirms your feed can detect it. Detection, not exploitation.
What scanners can see
Each source on its own line: they differ in how reliable their checks are and in how fresh.
- OpenVASGreenbone feed141,922 CVEs1,537 in KEVnewest check Oct 22, 2026
- NucleiOfficial templates4,641 CVEs538 in KEVnewest check today
- NucleiCommunity templates33,109 CVEs260 in KEVnot updated since Mar 6, 2026
- NucleiAI-generated templates2,486 CVEs46 in KEVnot updated since Mar 6, 2026
Just published, checkable
The newest critical and high CVEs a Nuclei template can check.
- CVE-2026-691377.7SuiteCRM: Authenticated SSRF in CalendarAccount testConnection Allows Internal Network Access and Response DisclosureOfficial template
- CVE-2026-1204469.4madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management APIOfficial template
- CVE-2026-1204429.8ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication BypassOfficial template
- CVE-2026-1202019.8Jpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN HeaderOfficial template
- CVE-2026-1165487.2VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' ParameterOfficial template
- CVE-2026-591778.8ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfacesOfficial template
- CVE-2026-1166907.5MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourceOfficial template
- CVE-2026-1167488.8Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF TokenOfficial template
Discussed now, checkable
What security news and researchers are talking about this week, and a scanner can check.
- CVE-2026-1114979.8Out-of-Bounds Write in Google Brotli DecoderOfficial template
- CVE-2026-116606—Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security GatewayOfficial template
- CVE-2026-966524.3Plex Media Server SSRFOfficial template
- CVE-2026-7565010.0Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)Official template
- CVE-2026-1096198.1RCE via stale global stateOfficial template
- CVE-2026-1096189.8RCE via OOM corruptionOfficial template
- CVE-2026-966554.3Plex Media Server arbitrary-host SSRFOfficial template
- CVE-2016-62105.9sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to e...Community or AI-generated template
Prefer we run it?
The check is easy to run once. The work is knowing every asset it applies to and running it again as your surface shifts. The managed external scan does that across your public IPs and domains, and reports only what is exposed.
Questions
How do I check whether a host is affected by a CVE?
Enter the CVE ID above. If a scanner covers it, we hand you the exact check to run against your own target — a ready-to-run Nuclei command and/or the OpenVAS NVT OID with a GMP query to confirm the NVT is in your feed.
Is there a Nuclei template for this CVE, and how do I run it?
When an official ProjectDiscovery template exists we give you the template ID and a copy-ready command (nuclei -id <CVE> -u <target>). If no template is published yet, we say so plainly rather than fabricate one.
What is the OpenVAS NVT OID for a CVE and how do I confirm it?
We list the detecting NVT OID(s) and a GMP query (get_nvts nvt_oid=...) so you can confirm the NVT is present in your Greenbone feed at your feed version before trusting a clean result.
Does a positive detection mean the host is exploitable?
No. These are detection checks — they fingerprint the vulnerable condition (service, version, reachable endpoint), not exploitability. Cross-reference CISA KEV and EPSS to judge real-world risk.
What if no scanner covers the CVE I'm checking?
Not every CVE has a published Nuclei or OpenVAS check. When neither covers it, we tell you and point you to the affected products so you can check manually — or run a managed external scan and we'll confirm exposure for you.