Skip to main content
HomePentest-Tools.com Logo
Start free trial

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.465 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.465

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Terraform CLI Configuration - Credentials ExposureNetwork Scanner

High

N/A
N/A
No
Terraform State - File ExposureNetwork Scanner

High

N/A
N/A
No
Serverless Framework - Configuration ExposureNetwork Scanner

Medium

N/A
N/A
No
Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter
CVE-2026-26216
Network Scanner

Critical(10)

0.060.93No
LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass
CVE-2026-49468
Network Scanner

High(8.1)

0.040.88No
Cybersecurity Infrastructure Security Agency (CISA)Citrix NetScaler - Remote Code Execution
CVE-2026-88771
Network Scanner

Critical(9.5)

0.020.64Yes
Gotenberg <= 8.30.1 - Remote Code Execution
CVE-2026-40281
Network Scanner

Critical(9.1)

0.030.81No
Cybersecurity Infrastructure Security Agency (CISA)Magento - Remote Code Execution
CVE-2026-75650
Network Scanner

Critical(10)

0.040.91Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla Page Builder CK - Remote Code Execution
CVE-2026-56290
Network Scanner

Critical(9.8)

0.310.99Yes
n8n - Remote Code Execution
CVE-2026-21858
Network Scanner

Critical(10)

0.791Yes
Signal K Server <= 2.18.0 - Information Disclosure
CVE-2025-68273
Network Scanner

Medium(5.3)

0.010.56No
Cybersecurity Infrastructure Security Agency (CISA)WordPress Core - Remote Code Execution
CVE-2026-87902
Network Scanner

Critical(9.2)

0.460.99Yes
Cybersecurity Infrastructure Security Agency (CISA)GitLab - Arbitrary File Read
CVE-2026-85706
Network Scanner

Critical(10)

0.931Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla SP Page Builder - Remote Code Execution
CVE-2026-48908
Network Scanner

Critical(9.8)

0.891Yes
GitLab - Arbitrary Method Invocation
CVE-2026-19478
Network Scanner

Critical(9.4)

0.611Yes
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
CVE-2026-61560
Network Scanner

Critical(9.8)

0.030.87No
Visual Composer <= 45.16.0 - Unauthenticated LFI
CVE-2026-12227
Network Scanner

Critical(9.8)

0.030.87No
Dolibarr < 24.0.0 - Authorization Bypass via hashp Parameter
CVE-2026-89013
Network Scanner

High(7.5)

0.020.75No
Asgaros Forum < 3.2.0 - SQL Injection
CVE-2025-11452
Network Scanner

High(7.5)

0.020.68No
9router <=0.5.4 - Authentication Bypass
CVE-2026-56681
Network Scanner

High(7.3)

0.010.61No
Blue Angel Software Suite (5V Technologies) - OS Command Injection
CVE-2025-34033
Network Scanner

High(8.8)

0.120.96No
Cybersecurity Infrastructure Security Agency (CISA)WordPress Core - PHP Template Path Traversal
CVE-2026-87902
Network Scanner

Critical(9.2)

0.460.99No
Cybersecurity Infrastructure Security Agency (CISA)Ray < 2.52.0 - Remote Code Execution
CVE-2025-62593
Network Scanner

Critical(9.8)

0.631No
NeuVector - Information Disclosure
CVE-2026-25703
Network Scanner

High(7.3)

0.010.56No
Cybersecurity Infrastructure Security Agency (CISA)SimpleHelp <= 5.5.7 - Arbitrary File Upload
CVE-2024-57728
Network Scanner

High(7.2)

0.651No