Skip to main content
HomePentest-Tools.com Logo
Start free trial

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.494 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 210

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)Citrix NetScaler - Remote Code Execution
CVE-2026-88771
Network Scanner

Critical(9.5)

0.020.65Yes
Cybersecurity Infrastructure Security Agency (CISA)Magento - Remote Code Execution
CVE-2026-75650
Network Scanner

Critical(10)

0.040.91Yes
GitLab - Arbitrary Method Invocation
CVE-2026-19478
Network Scanner

Critical(9.4)

0.611Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla SP Page Builder - Remote Code Execution
CVE-2026-48908
Network Scanner

Critical(9.8)

0.891Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla Page Builder CK - Remote Code Execution
CVE-2026-56290
Network Scanner

Critical(9.8)

0.310.99Yes
Cybersecurity Infrastructure Security Agency (CISA)WordPress Core - Remote Code Execution
CVE-2026-87902
Network Scanner

Critical(9.2)

0.40.99Yes
Cybersecurity Infrastructure Security Agency (CISA)GitLab - Arbitrary File Read
CVE-2026-85706
Network Scanner

Critical(10)

0.931Yes
n8n - Remote Code Execution
CVE-2026-21858
Network Scanner

Critical(10)

0.791Yes
Cybersecurity Infrastructure Security Agency (CISA)Laravel Livewire - Remote Code Execution
CVE-2025-54068
Network Scanner

Critical(9.8)

0.981Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla Balbooa Forms - Remote Code Execution
CVE-2026-56291
Network Scanner

Critical(9.8)

0.150.97Yes
SonicWall GMS - Remote Code Execution
CVE-2026-66147
Network Scanner

Critical(9.8)

0.020.78Yes
Ruby on Rails Active Storage - Remote Code Execution
CVE-2026-66066
Network Scanner

Critical(10)

0.280.99Yes
Cybersecurity Infrastructure Security Agency (CISA)JetBrains TeamCity - Remote Code Execution
CVE-2026-63077
Network Scanner

Critical(9.8)

0.91Yes
Cybersecurity Infrastructure Security Agency (CISA)IBM Langflow - Remote Code Execution
CVE-2026-9198
Network Scanner

Critical(9.8)

0.290.99Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla iCagenda - Remote Code Execution
CVE-2026-48939
Network Scanner

Critical(9.8)

0.210.98Yes
Cybersecurity Infrastructure Security Agency (CISA)ForgeRock AM/OpenAM - Remote Code Execution
CVE-2021-35464
Network Scanner

Critical(9.8)

11Yes
Cybersecurity Infrastructure Security Agency (CISA)Adobe ColdFusion - RDS Arbitrary File Write
CVE-2026-48282
Network Scanner

Critical(10)

0.430.99Yes
Cybersecurity Infrastructure Security Agency (CISA)Apache ActiveMQ - Remote Code Execution
CVE-2026-34197
Network Scanner

High(8.8)

0.160.97Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla JCE - Remote Code Execution
CVE-2026-48907
Network Scanner

Critical(10)

0.170.97Yes
Cybersecurity Infrastructure Security Agency (CISA)wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection
CVE-2026-63030
Network Scanner

Critical(9.8)

0.110.96Yes
Cybersecurity Infrastructure Security Agency (CISA)DrayTek Vigor - OS Command Injection
CVE-2024-12987
Network Scanner

Critical(9.8)

0.991Yes
Cybersecurity Infrastructure Security Agency (CISA)Cisco ISE - Unauthenticated Remote Code Execution
CVE-2025-20281
Network Scanner

Critical(9.8)

0.981Yes
Blink Router (LB-LINK) - OS Command Injection
CVE-2025-45985
Network Scanner

Critical(9.8)

0.070.94Yes
Hoverfly - Remote Code Execution
CVE-2025-54123
Network Scanner

Critical(9.8)

0.110.96Yes
Roxy-WI - Remote Code Execution
CVE-2022-31161
Network Scanner

Critical(9.8)

0.290.99Yes