Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.183 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 191 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.183

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id CVE-2026-4987	Network Scanner	Jul 29, 2026	High(7.5)	0.01	0.18	No
Discuz! X5.0 - Authentication Bypass CVE-2026-49952	Network Scanner	Jul 29, 2026	Critical(9.1)	0.02	0.79	No
Check Point Security Management Server - SmartConsole Authentication Bypass CVE-2026-16232	Network Scanner	Jul 29, 2026	Critical(9.8)	0.7	1	No
Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials CVE-2026-44825	Network Scanner	Jul 29, 2026	High(8.1)	0.01	0.44	No
Dolibarr <=22.0.4 - Local File Inclusion CVE-2026-34036	Network Scanner	Jul 29, 2026	Medium(6.5)	0.01	0.35	No
Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion CVE-2026-8713	Network Scanner	Jul 28, 2026	Critical(9.1)	0.03	0.85	No
User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion CVE-2025-14047	Network Scanner	Jul 28, 2026	Medium(5.3)	0.01	0.46	No
Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload CVE-2026-1830	Network Scanner	Jul 28, 2026	Critical(9.8)	0.08	0.94	No
IBM Langflow - Remote Code Execution CVE-2026-9198	Network Scanner	Jul 28, 2026	Critical(9.8)	0.02	0.78	No
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload CVE-2026-3335	Network Scanner	Jul 28, 2026	Medium(5.3)	0.01	0.59	No
Arelle < 2.39.10 - Remote Code Execution CVE-2026-42796	Network Scanner	Jul 24, 2026	Critical(9.8)	0.03	0.83	No
Fortinet FortiSIEM - Unauthenticated Command Injection CVE-2023-34992	Network Scanner	Jul 23, 2026	Critical(9.8)	0.81	1	No
Prodigy Annotation Tool - Unauthenticated Exposure	Network Scanner	Jul 23, 2026	Medium	N/A	N/A	No
Perforce Server - Unauthenticated Remote Depot Access CVE-2026-6043	Network Scanner	Jul 23, 2026	High(7.5)	0.02	0.67	No
Alibaba Sentinel - Default Login	Network Scanner	Jul 23, 2026	High	N/A	N/A	No
vLLM OpenAI-Compatible API - Unauthenticated Exposure	Network Scanner	Jul 23, 2026	Medium	N/A	N/A	No
Perforce Server - User Enumeration CVE-2026-6043	Network Scanner	Jul 23, 2026	Medium(5.3)	0.02	0.67	No
Perforce Server - Information Disclosure CVE-2026-6043	Network Scanner	Jul 23, 2026	Medium(5.3)	0.02	0.67	No
Dockwatch <= 0.6.567 - OS Command Injection CVE-2026-58455	Network Scanner	Jul 23, 2026	Critical(9.8)	0.05	0.92	No
Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code Execution CVE-2024-42323	Network Scanner	Jul 23, 2026	High(8.8)	0.09	0.95	No
Tautulli <= 2.16.1 - Path Traversal CVE-2026-31831	Network Scanner	Jul 23, 2026	High(7.5)	0.02	0.74	No
WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure CVE-2026-8385	Network Scanner	Jul 23, 2026	Medium(5.3)	0.01	0.52	No
Perforce Server - Passwordless User Accounts CVE-2026-6043	Network Scanner	Jul 23, 2026	Critical(9.1)	0.02	0.67	No
Joomla SP LMS <= 4.1.3 - Remote Code Execution CVE-2026-48909	Network Scanner	Jul 23, 2026	Critical(9.5)	0.08	0.94	No
GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting CVE-2021-47795	Network Scanner	Jul 23, 2026	Medium(6.2)	0.03	0.84	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove