Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.500 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.500

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Splunk Enterprise Patroni REST API - Missing Authentication RCE CVE-2026-76268	Network Scanner	Oct 16, 2026	Critical(9.8)	0.02	0.76	No
JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering CVE-2010-0738	Network Scanner	Oct 15, 2026	Critical(9.8)	0.75	1	No
Request Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload CVE-2026-18143	Network Scanner	Oct 15, 2026	Critical(9.8)	0.02	0.77	No
Apache SkyWalking Horizon UI - Default Login	Network Scanner	Oct 15, 2026	High	N/A	N/A	No
Apache SkyWalking Horizon UI - Config Exposure	Network Scanner	Oct 15, 2026	Low	N/A	N/A	No
WP Fast Total Search <= 1.80.280 - Unauthenticated Time-Based Blind SQL Injection CVE-2026-12741	Network Scanner	Oct 15, 2026	High(7.5)	0.02	0.76	No
GeoServer jsonArrayContains CQL Filter - SQL Injection CVE-2026-76904	Network Scanner	Oct 14, 2026	Critical(9.8)	0.04	0.91	No
WordPress weMail < 2.1.3 - Cross-Site Scripting CVE-2026-8089	Network Scanner	Oct 14, 2026	High(7.1)	0.01	0.44	No
Next4Biz CSM - Arbitrary File Read via DownloadFileHandler CVE-2026-6377	Network Scanner	Oct 14, 2026	High(8.6)	0.02	0.78	No
Check Point Security Management - Unauthenticated Directory Traversal to RCE CVE-2026-93616	Network Scanner	Oct 14, 2026	Critical(9.8)	0.76	1	No
Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header CVE-2026-104935	Network Scanner	Oct 14, 2026	Critical(10)	0.26	0.98	No
Chef Automate API Gateway - Authentication Bypass CVE-2026-80462	Network Scanner	Oct 14, 2026	Critical(10)	0.03	0.81	No
Discourse < 2026.1.2/2026.2.1/2026.3.0-latest.1 - Unauthenticated Private User Action Disclosure CVE-2026-27934	Network Scanner	Oct 14, 2026	High(8.7)	0.02	0.73	No
Discourse - Private Group Membership Inference via exclude_groups CVE-2026-33425	Network Scanner	Oct 14, 2026	Medium(5.3)	0.01	0.55	No
SuiteCRM <= 7.15.1, <= 8.10.1 - Authenticated SSRF CVE-2026-69137	Network Scanner	Oct 14, 2026	High(7.7)	N/A	N/A	No
Bifrost < 2.1.0 - Unauthenticated MCP Stdio Command Execution CVE-2026-90898	Network Scanner	Oct 13, 2026	Critical(9.8)	0.03	0.84	No
MikroTik WinBox <= 6.49.17 - Username Enumeration CVE-2024-54772	Network Scanner	Oct 13, 2026	Medium(5.3)	0.02	0.7	No
MITRE Caldera - Default Login	Network Scanner	Oct 13, 2026	High	N/A	N/A	No
WordPress Tag Groups < 2.2.0 - Reflected Cross-Site Scripting CVE-2026-9833	Network Scanner	Oct 13, 2026	High(7.1)	0.01	0.44	No
GravitLauncher LaunchServer <=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read CVE-2026-54617	Network Scanner	Oct 13, 2026	Critical(9.8)	0.03	0.87	No
Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read CVE-2026-91136	Network Scanner	Oct 13, 2026	High(7.5)	0.02	0.78	No
Selenium Grid < 4.0.0-alpha-7 - Remote Code Execution CVE-2022-28108	Network Scanner	Oct 13, 2026	Critical(9.8)	0.23	0.98	No
Eclipse Theia - Unauthenticated Path Traversal CVE-2026-12609	Network Scanner	Oct 12, 2026	High(7.5)	0.02	0.77	No
FOSSBilling 0.5.4-0.7.x - Unauthenticated System API Role Authorization Bypass CVE-2026-27604	Network Scanner	Oct 12, 2026	Critical	0.02	0.7	No
Discourse - Unauthenticated Mailpace Webhook Bounce-Score Forgery CVE-2026-26077	Network Scanner	Oct 12, 2026	Medium(6.5)	0.02	0.66	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove