Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.438 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 199 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.438

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access CVE-2026-89063	Network Scanner	Sep 23, 2026	High(8.2)	0.01	0.34	No
AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure CVE-2026-6639	Network Scanner	Sep 22, 2026	High(7.5)	0.01	0.31	No
Hippoo Mobile App for WooCommerce - Broken Access Control CVE-2026-49060	Network Scanner	Sep 22, 2026	Critical(9.8)	0.01	0.43	No
OpenID Connect - Unsigned (alg none) ID Token Supported	Network Scanner	Sep 22, 2026	Medium	N/A	N/A	No
Cockpit CMS <= 2.14.0 - Path Traversal / Local File Inclusion CVE-2026-58467	Network Scanner	Sep 22, 2026	High(8.2)	0.01	0.44	No
Strapi <=5.36.x - Admin Credential Enumeration CVE-2026-27886	Network Scanner	Sep 22, 2026	Critical(9.2)	0.01	0.48	No
Qdrant - Telemetry Exposure	Network Scanner	Sep 22, 2026	Medium	N/A	N/A	No
WordPress Click2Shell Theme Preview Selector Injection	Network Scanner	Sep 22, 2026	High	N/A	N/A	No
PowerDNS Authoritative Server Monitor - Unauthenticated Exposure	Network Scanner	Sep 22, 2026	Medium	N/A	N/A	No
Newfold WordPress Plugins - Unauthenticated Admin Bypass via Empty HMAC Secret CVE-2026-80099	Network Scanner	Sep 22, 2026	High(8.8)	0.01	0.43	No
WordPress Gravity Forms Plugin <=3.1.0.4 - Unauthenticated Arbitrary File Upload CVE-2026-84434	Network Scanner	Sep 21, 2026	Critical(9.8)	0.03	0.86	No
Yamcs <=5.8.6 - Cross-Site Scripting CVE-2026-55549	Network Scanner	Sep 19, 2026	Medium(6.5)	0.01	0.59	No
argocd-mcp 0.8.0 - Unauthenticated MCP Session and Tool Access CVE-2026-82456	Network Scanner	Sep 19, 2026	Critical(10)	0.02	0.72	No
Langflow OSS - Superuser Token Issuance CVE-2026-9103	Network Scanner	Sep 18, 2026	Critical(9.8)	0.03	0.86	No
etcd RAFT Unauthenticated API	Network Scanner	Sep 18, 2026	High	N/A	N/A	No
Ivanti EPMM < 12.8.0.0 - Remote Code Execution CVE-2026-1340	Network Scanner	Sep 18, 2026	Critical(9.8)	0.99	1	No
etcd v3 Unauthenticated API	Network Scanner	Sep 18, 2026	High	N/A	N/A	No
SiYuan <=3.7.2 - SQL Injection CVE-2026-69085	Network Scanner	Sep 18, 2026	Critical(10)	0.01	0.58	No
TEN Framework - Arbitrary File Read & Write CVE-2026-85688	Network Scanner	Sep 18, 2026	Critical(9.8)	0.02	0.73	No
H2 Database Console - JNDI Injection RCE CVE-2021-42392	Network Scanner	Sep 18, 2026	Critical(9.8)	0.84	1	No
JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass CVE-2026-42018	Network Scanner	Sep 18, 2026	High(7.5)	0.12	0.96	No
Essential Blocks < 6.4.0 - Information Disclosure CVE-2026-13153	Network Scanner	Sep 18, 2026	High(7.5)	0.01	0.59	No
N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution CVE-2026-86218	Network Scanner	Sep 18, 2026	Critical(10)	0.08	0.95	No
Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass CVE-2026-18072	Network Scanner	Sep 17, 2026	Critical(9.8)	0.04	0.88	No
Langflow - Unauthenticated API Exposure	Network Scanner	Sep 16, 2026	High	N/A	N/A	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove