Am I actually vulnerable?

Type a CVE ID and get the exact check to run against your own systems: a Nuclei command, or the OpenVAS NVT with a GMP query that confirms your feed can detect it. Detection, not exploitation.

What scanners can see

Each source on its own line: they differ in how reliable their checks are and in how fresh.

OpenVASGreenbone feed133,271 CVEs—newest check Sep 18, 2026

Just published, checkable

The newest critical and high CVEs a Nuclei template can check.

CVE-2026-879028.1An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for ...Community or AI-generated template
CVE-2026-566817.39Router: Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip HeaderCommunity or AI-generated template
CVE-2026-844349.8Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload FieldCommunity or AI-generated template
CVE-2026-890637.5Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' ParameterCommunity or AI-generated template
CVE-2026-852007.5GEO my WP <= 4.5.5.3 - Unauthenticated Local File InclusionCommunity or AI-generated template
CVE-2026-8570610.0Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabCommunity or AI-generated template
CVE-2025-572317.5Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url.Community or AI-generated template
CVE-2026-800998.8Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty SecretCommunity or AI-generated template

Discussed now, checkable

What security news and researchers are talking about this week, and a scanner can check.

Prefer we run it?

The check is easy to run once. The work is knowing every asset it applies to and running it again as your surface shifts. The managed external scan does that across your public IPs and domains, and reports only what is exposed.

Managed external scan

Questions

How do I check whether a host is affected by a CVE?

Enter the CVE ID above. If a scanner covers it, we hand you the exact check to run against your own target — a ready-to-run Nuclei command and/or the OpenVAS NVT OID with a GMP query to confirm the NVT is in your feed.

Is there a Nuclei template for this CVE, and how do I run it?

When an official ProjectDiscovery template exists we give you the template ID and a copy-ready command (nuclei -id <CVE> -u <target>). If no template is published yet, we say so plainly rather than fabricate one.

What is the OpenVAS NVT OID for a CVE and how do I confirm it?

We list the detecting NVT OID(s) and a GMP query (get_nvts nvt_oid=...) so you can confirm the NVT is present in your Greenbone feed at your feed version before trusting a clean result.

Does a positive detection mean the host is exploitable?

No. These are detection checks — they fingerprint the vulnerable condition (service, version, reachable endpoint), not exploitability. Cross-reference CISA KEV and EPSS to judge real-world risk.

What if no scanner covers the CVE I'm checking?

Not every CVE has a published Nuclei or OpenVAS check. When neither covers it, we tell you and point you to the affected products so you can check manually — or run a managed external scan and we'll confirm exposure for you.