Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.473 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 17.473

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read CVE-2026-21589	Network Scanner	Oct 7, 2026	Critical(9.8)	0.01	0.54	No
Microsoft Exchange Server - Authentication Bypass CVE-2026-62911	Network Scanner	Oct 7, 2026	High(8)	0.01	0.52	No
Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch CVE-2026-86242	Network Scanner	Oct 6, 2026	High(8.1)	0.04	0.9	No
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Upload CVE-2026-10818	Network Scanner	Oct 6, 2026	High(8.1)	0.03	0.85	No
Yamcs <=5.11.12 - Arbitrary File Read CVE-2026-55552	Network Scanner	Oct 5, 2026	High(7.5)	0.02	0.77	No
WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command Injection CVE-2026-29058	Network Scanner	Oct 5, 2026	Critical(9.8)	0.07	0.94	No
BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass CVE-2026-0692	Network Scanner	Oct 5, 2026	High(7.5)	0.01	0.54	No
SureForms <= 1.13.1 - Sensitive Information Exposure CVE-2025-12536	Network Scanner	Oct 5, 2026	Medium(5.3)	0.01	0.55	No
Terraform State - File Exposure	Network Scanner	Oct 4, 2026	High	N/A	N/A	No
Terraform CLI Configuration - Credentials Exposure	Network Scanner	Oct 4, 2026	High	N/A	N/A	No
Serverless Framework - Configuration Exposure	Network Scanner	Oct 4, 2026	Medium	N/A	N/A	No
Crawl4AI < 0.8.0 - Unauthenticated Remote Code Execution via Hooks Parameter CVE-2026-26216	Network Scanner	Oct 4, 2026	Critical(10)	0.06	0.93	No
LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass CVE-2026-49468	Network Scanner	Oct 2, 2026	High(8.1)	0.04	0.88	No
Citrix NetScaler - Remote Code Execution CVE-2026-88771	Network Scanner	Sep 30, 2026	Critical(9.5)	0.02	0.65	Yes
Gotenberg <= 8.30.1 - Remote Code Execution CVE-2026-40281	Network Scanner	Sep 30, 2026	Critical(9.1)	0.03	0.82	No
Magento - Remote Code Execution CVE-2026-75650	Network Scanner	Sep 29, 2026	Critical(10)	0.04	0.91	Yes
WordPress Core - Remote Code Execution CVE-2026-87902	Network Scanner	Sep 29, 2026	Critical(9.2)	0.47	0.99	Yes
Signal K Server <= 2.18.0 - Information Disclosure CVE-2025-68273	Network Scanner	Sep 29, 2026	Medium(5.3)	0.01	0.56	No
Joomla Page Builder CK - Remote Code Execution CVE-2026-56290	Network Scanner	Sep 29, 2026	Critical(9.8)	0.31	0.99	Yes
n8n - Remote Code Execution CVE-2026-21858	Network Scanner	Sep 29, 2026	Critical(10)	0.79	1	Yes
GitLab - Arbitrary File Read CVE-2026-85706	Network Scanner	Sep 29, 2026	Critical(10)	0.93	1	Yes
Joomla SP Page Builder - Remote Code Execution CVE-2026-48908	Network Scanner	Sep 29, 2026	Critical(9.8)	0.89	1	Yes
GitLab - Arbitrary Method Invocation CVE-2026-19478	Network Scanner	Sep 29, 2026	Critical(9.4)	0.61	1	Yes
GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access CVE-2026-61560	Network Scanner	Sep 28, 2026	Critical(9.8)	0.03	0.87	No
Visual Composer <= 45.16.0 - Unauthenticated LFI CVE-2026-12227	Network Scanner	Sep 28, 2026	Critical(9.8)	0.03	0.87	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove