---
id: 7073
title: "Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405)"
cve: CVE-2024-43405
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/nuclei-signature-verification-bypass"
published_at: "2025-01-03T15:00:01Z"
tags: ["rce", "open-source", "vulnerability", "security-research", "nuclei", "cve-2024-43405"]
phying_url: "https://phying.com/item/7073"
lang: en
---

# Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405)

## Summary

Wiz discovered CVE-2024-43405, a high-severity signature verification bypass in ProjectDiscovery's popular Nuclei scanner that could lead to arbitrary code execution, and helped get it fixed.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-43405
- **Published:** 2025-01-03T15:00:01Z
- **Original:** https://www.wiz.io/blog/nuclei-signature-verification-bypass
- **Phying News:** https://phying.com/item/7073