Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.471 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.471

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Upload CVE-2026-10818	Network Scanner	Oct 6, 2026	High(8.1)	0.01	0.52	No
Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch CVE-2026-86242	Network Scanner	Oct 6, 2026	High(8.1)	0.02	0.64	No
WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command Injection CVE-2026-29058	Network Scanner	Oct 5, 2026	Critical(9.8)	0.02	0.76	No
Yamcs <=5.11.12 - Arbitrary File Read CVE-2026-55552	Network Scanner	Oct 5, 2026	High(7.5)	0.01	0.44	No
SureForms <= 1.13.1 - Sensitive Information Exposure CVE-2025-12536	Network Scanner	Oct 5, 2026	Medium(5.3)	0.01	0.55	No
BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass CVE-2026-0692	Network Scanner	Oct 5, 2026	High(7.5)	0.01	0.21	No
Terraform State - File Exposure	Network Scanner	Oct 4, 2026	High	N/A	N/A	No
Terraform CLI Configuration - Credentials Exposure	Network Scanner	Oct 4, 2026	High	N/A	N/A	No
Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter CVE-2026-26216	Network Scanner	Oct 4, 2026	Critical(10)	0.06	0.93	No
Serverless Framework - Configuration Exposure	Network Scanner	Oct 4, 2026	Medium	N/A	N/A	No
LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass CVE-2026-49468	Network Scanner	Oct 2, 2026	High(8.1)	0.04	0.88	No
Citrix NetScaler - Remote Code Execution CVE-2026-88771	Network Scanner	Sep 30, 2026	Critical(9.5)	0.02	0.65	Yes
Gotenberg <= 8.30.1 - Remote Code Execution CVE-2026-40281	Network Scanner	Sep 30, 2026	Critical(9.1)	0.03	0.81	No
Magento - Remote Code Execution CVE-2026-75650	Network Scanner	Sep 29, 2026	Critical(10)	0.04	0.91	Yes
WordPress Core - Remote Code Execution CVE-2026-87902	Network Scanner	Sep 29, 2026	Critical(9.2)	0.47	0.99	Yes
Signal K Server <= 2.18.0 - Information Disclosure CVE-2025-68273	Network Scanner	Sep 29, 2026	Medium(5.3)	0.01	0.56	No
Joomla Page Builder CK - Remote Code Execution CVE-2026-56290	Network Scanner	Sep 29, 2026	Critical(9.8)	0.31	0.99	Yes
n8n - Remote Code Execution CVE-2026-21858	Network Scanner	Sep 29, 2026	Critical(10)	0.79	1	Yes
GitLab - Arbitrary File Read CVE-2026-85706	Network Scanner	Sep 29, 2026	Critical(10)	0.93	1	Yes
Joomla SP Page Builder - Remote Code Execution CVE-2026-48908	Network Scanner	Sep 29, 2026	Critical(9.8)	0.89	1	Yes
GitLab - Arbitrary Method Invocation CVE-2026-19478	Network Scanner	Sep 29, 2026	Critical(9.4)	0.61	1	Yes
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access CVE-2026-61560	Network Scanner	Sep 28, 2026	Critical(9.8)	0.03	0.87	No
Visual Composer <= 45.16.0 - Unauthenticated LFI CVE-2026-12227	Network Scanner	Sep 28, 2026	Critical(9.8)	0.03	0.87	No
Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter CVE-2026-89013	Network Scanner	Sep 28, 2026	High(7.5)	0.02	0.75	No
WordPress Core - PHP Template Path Traversal CVE-2026-87902	Network Scanner	Sep 24, 2026	Critical(9.2)	0.47	0.99	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove