Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale

Nuclei Templates v10.4.2 and v10.4.3 ship 226 new templates covering 123 CVEs—about 10 actively exploited KEV entries—and push deeper into AI/LLM attack surface with 27 first-time contributors joining.

Version scanning lies by omission: only ~6% of CVEs are exploited. Nuclei validates exploitability at runtime with matchers, extractors, and multi-step flows, as the 2025 CrushFTP cases illustrate.

Legacy scanners fail from untrusted version-based guesses, not coverage gaps: only ~6% of CVEs are exploited, yet weaponization is fast. Runtime validation plus KEV focus yields actionable results.

Nuclei Templates v10.2.1/v10.2.2 add 106 templates covering 57 CVEs, including 10 KEVs like Ivanti EPMM RCE and Versa Concerto auth bypass. A template bounty program and real-time update bot launched.

“Open source isn’t about perfection; it’s about putting an idea forward and improving it together as a community.” Rishi (@rxerium) If you’ve spent any time in the Nuclei Templates repository, you’ve almost certainly run something Rishi engineered. With over 500 templates merged, picked up by the likes of the UK’s National Cyber Security Center (NCSC), California Cybersecurity Integration Center, CERT Polska, Spain’s national security agency, and many others, he’s one of the most prolific con

A step-by-step guide to installing ProjectDiscovery tools like Nuclei, Subfinder, and Katana on Linux and Windows, covering Go installation, PATH configuration, and fixing common CLI errors.