Skip to main content
HomePentest-Tools.com Logo
Start free trial

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.604 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 222 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.604

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
JBoss AS/EAP Admin Console - Default LoginNetwork Scanner

Critical

N/A
N/A
No
Laravel TokenGuard - Authentication Bypass
CVE-2026-114509
Network Scanner

Critical(9.2)

0.010.56No
PIAF-HMS ec.php - SQL Injection
CVE-2026-54419
Network Scanner

Critical(9.8)

0.010.39No
OpenPanel - Unauthenticated Bull Board Queue Dashboard
CVE-2026-116817
Network Scanner

Medium(6.5)

0.010.2No
madong-admin-saas <= 5.1.4 - Unauthenticated Platform Tenant Management Access
CVE-2026-120446
Network Scanner

High(8.8)

0.010.39No
Langflow 1.8.3 and 1.9.0 - Authenticated MCP Stdio Command Execution
CVE-2026-105740
Network Scanner

Critical(9.9)

0.020.65No
SUSE Rancher - Stored XSS via Unauthenticated Settings Override
CVE-2026-88804
Network Scanner

Critical(9.6)

0.010.3No
Prefect Server Unauthenticated API ExposureNetwork Scanner

Medium

N/A
N/A
No
Drupal Commerce Core < 3.3.13 / < 8.x-2.41 - Guest Cart Admin Access Bypass
CVE-2026-118539
Network Scanner

Critical(6.5)

0.010.24No
Cybersecurity Infrastructure Security Agency (CISA)Adobe Commerce/Magento <= 2.4.9 - StyleSmuggler Unauthenticated RCE via SSTI
CVE-2026-75650
Network Scanner

Critical(10)

0.040.91No
Cybersecurity Infrastructure Security Agency (CISA)Plex Media Server < 1.43.3.10861 - SSRF via Transcoder
CVE-2026-96655
Network Scanner

Medium(5.3)

0.020.77No
bWAPP Default LoginNetwork Scanner

Critical

N/A
N/A
No
Cybersecurity Infrastructure Security Agency (CISA)BeyondTrust Remote Support <= 26.2.3 - Origin Validation File Upload
CVE-2026-102764
Network Scanner

Critical(9.3)

0.190.98No
Typemill CMS < 2.23.0 - Cross-Site Scripting
CVE-2026-53468
Network Scanner

Medium(4.6)

0.010.37No
MLflow 3.10.0-3.16.1 - Arbitrary File Read
CVE-2026-116690
Network Scanner

High(7.5)

0.020.79No
WordPress LearnPress < 4.4.1 - Cross-Site Scripting
CVE-2026-12970
Network Scanner

High(7.1)

0.010.41No
Elementor 4.3.0 - 4.3.1 - REST Nonce BypassNetwork Scanner

Medium

N/A
N/A
No
Cybersecurity Infrastructure Security Agency (CISA)PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code Execution
CVE-2026-109619
Network Scanner

Critical(9.2)

11No
Langflow 1.7.2-1.10.0 - Authenticated Remote Code Execution
CVE-2026-7873
Network Scanner

Critical(9.9)

0.070.94No
Product Filter by WBW <= 3.4.6 - SQL Injection
CVE-2026-112866
Network Scanner

Critical(9.3)

0.020.68No
Cybersecurity Infrastructure Security Agency (CISA)GitLab CE/EE < 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer Overflow
CVE-2026-97229
Network Scanner

Critical(10)

0.280.99No
Cybersecurity Infrastructure Security Agency (CISA)Plex Media Server < 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell)
CVE-2026-96652
Network Scanner

Medium(4.3)

0.120.97No
Langchain-Chatchat <= 0.3.1.3 - Unauthenticated RCE
CVE-2026-75128
Network Scanner

Critical(9.8)

0.030.83No
ClickHouse Server - Brotli v1.2.0 Decoder DoS/OOB-Write
CVE-2026-116366
Network Scanner

Critical(9.5)

0.010.62No
NUUO Crystal Server - Unauthenticated File Upload Remote Code ExecutionNetwork Scanner

Critical

N/A
N/A
No