Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.485 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.485

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Selenium Grid < 4.0.0-alpha-7 - Remote Code Execution CVE-2022-28108	Network Scanner	Oct 13, 2026	Critical(9.8)	0.12	0.96	No
Bifrost < 2.1.0 - Unauthenticated MCP Stdio Command Execution CVE-2026-90898	Network Scanner	Oct 13, 2026	Critical(9.8)	0.01	0.49	No
GravitLauncher LaunchServer <=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read CVE-2026-54617	Network Scanner	Oct 13, 2026	Critical(9.8)	0.01	0.51	No
WordPress Tag Groups < 2.2.0 - Reflected Cross-Site Scripting CVE-2026-9833	Network Scanner	Oct 13, 2026	High(7.1)	0.01	0.2	No
MikroTik WinBox <= 6.49.17 - Username Enumeration CVE-2024-54772	Network Scanner	Oct 13, 2026	Medium(5.3)	0.01	0.56	No
Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read CVE-2026-91136	Network Scanner	Oct 13, 2026	High(7.5)	0.01	0.45	No
MITRE Caldera - Default Login	Network Scanner	Oct 13, 2026	High	N/A	N/A	No
Eclipse Theia - Unauthenticated Path Traversal CVE-2026-12609	Network Scanner	Oct 12, 2026	High(7.5)	0.01	0.43	No
FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass CVE-2026-27604	Network Scanner	Oct 12, 2026	Critical	0.01	0.42	No
Discourse - Unauthenticated Mailpace Webhook Bounce-Score Forgery CVE-2026-26077	Network Scanner	Oct 12, 2026	Medium(6.5)	0.01	0.37	No
Langflow OSS <=1.12.2 - Unauthenticated RCE via Import Code Execution CVE-2026-93674	Network Scanner	Oct 11, 2026	Critical(9.8)	0.03	0.86	No
Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal CVE-2022-27925	Network Scanner	Oct 8, 2026	High(7.2)	0.99	1	No
Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read CVE-2026-21589	Network Scanner	Oct 7, 2026	Critical(9.8)	0.03	0.86	No
Microsoft Exchange Server - Authentication Bypass CVE-2026-62911	Network Scanner	Oct 7, 2026	High(8)	0.01	0.52	No
Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch CVE-2026-86242	Network Scanner	Oct 6, 2026	High(8.1)	0.04	0.9	No
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Upload CVE-2026-10818	Network Scanner	Oct 6, 2026	High(8.1)	0.03	0.85	No
BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass CVE-2026-0692	Network Scanner	Oct 5, 2026	High(7.5)	0.01	0.56	No
WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command Injection CVE-2026-29058	Network Scanner	Oct 5, 2026	Critical(9.8)	0.07	0.94	No
Yamcs <=5.11.12 - Arbitrary File Read CVE-2026-55552	Network Scanner	Oct 5, 2026	High(7.5)	0.02	0.77	No
SureForms <= 1.13.1 - Sensitive Information Exposure CVE-2025-12536	Network Scanner	Oct 5, 2026	Medium(5.3)	0.01	0.56	No
Terraform State - File Exposure	Network Scanner	Oct 4, 2026	High	N/A	N/A	No
Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter CVE-2026-26216	Network Scanner	Oct 4, 2026	Critical(10)	0.07	0.94	No
Terraform CLI Configuration - Credentials Exposure	Network Scanner	Oct 4, 2026	High	N/A	N/A	No
Serverless Framework - Configuration Exposure	Network Scanner	Oct 4, 2026	Medium	N/A	N/A	No
LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass CVE-2026-49468	Network Scanner	Oct 2, 2026	High(8.1)	0.04	0.88	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove