Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.428 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 199 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Is exploitable with Sniper

Is in CISA catalog

Detectable with

Displaying 1 - 25 results out of 199

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Ruby on Rails Active Storage - Remote Code Execution CVE-2026-66066	Network Scanner	Sep 15, 2026	Critical(10)	0.28	0.99	Yes
JetBrains TeamCity - Remote Code Execution CVE-2026-63077	Network Scanner	Sep 15, 2026	Critical(9.8)	0.87	1	Yes
IBM Langflow - Remote Code Execution CVE-2026-9198	Network Scanner	Sep 8, 2026	Critical(9.8)	0.61	1	Yes
Joomla iCagenda - Remote Code Execution CVE-2026-48939	Network Scanner	Sep 7, 2026	Critical(9.8)	0.21	0.98	Yes
ForgeRock AM/OpenAM - Remote Code Execution CVE-2021-35464	Network Scanner	Aug 4, 2026	Critical(9.8)	1	1	Yes
Adobe ColdFusion - RDS Arbitrary File Write CVE-2026-48282	Network Scanner	Jul 22, 2026	Critical(10)	0.43	0.99	Yes
Joomla JCE - Remote Code Execution CVE-2026-48907	Network Scanner	Jul 21, 2026	Critical(10)	0.79	1	Yes
Apache ActiveMQ - Remote Code Execution CVE-2026-34197	Network Scanner	Jul 21, 2026	High(8.8)	0.99	1	Yes
wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.98	1	Yes
DrayTek Vigor - OS Command Injection CVE-2024-12987	Network Scanner	Mar 31, 2026	Critical(9.8)	0.99	1	Yes
Cisco ISE - Unauthenticated Remote Code Execution CVE-2025-20281	Network Scanner	Mar 31, 2026	Critical(9.8)	0.98	1	Yes
Blink Router (LB-LINK) - OS Command Injection CVE-2025-45985	Network Scanner	Mar 31, 2026	Critical(9.8)	0.07	0.94	Yes
Hoverfly - Remote Code Execution CVE-2025-54123	Network Scanner	Mar 31, 2026	Critical(9.8)	0.11	0.96	Yes
Roxy-WI - Remote Code Execution CVE-2022-31161	Network Scanner	Mar 31, 2026	Critical(9.8)	0.29	0.99	Yes
Aviatrix Controller - Remote Code Execution CVE-2024-50603	Network Scanner	Mar 10, 2026	Critical(10)	0.99	1	Yes
Hikvision IP camera/NVR - Remote Command Execution CVE-2021-36260	Network Scanner	Mar 10, 2026	Critical(9.8)	1	1	Yes
MeteoBridge <= 6.1 - Remote Code Execution CVE-2025-4008	Network Scanner	Mar 3, 2026	High(7.5)	0.94	1	Yes
HPE OneView - Remote Code Execution CVE-2025-37164	Network Scanner	Mar 3, 2026	Critical(10)	0.91	1	Yes
Ivanti Endpoint Manager Mobile - Remote Code Execution CVE-2026-1281	Network Scanner	Feb 17, 2026	Critical(9.8)	0.99	1	Yes
Telnet inetutils - Authentication Bypass CVE-2026-24061	Network Scanner	Feb 3, 2026	Critical(9.8)	0.99	1	Yes
WordPress Post SMTP - Account Takeover CVE-2025-11833	Network Scanner	Dec 23, 2025	Critical(9.8)	0.52	0.99	Yes
React Server Components - Remote Code Execution (React2Shell) CVE-2025-55182	Network Scanner	Dec 9, 2025	Critical(10)	1	1	Yes
Fortinet FortiWeb - Authentication Bypass & Remote Code Execution CVE-2025-64446 CVE-2025-58034	Network Scanner	Dec 2, 2025	Critical(9.8)	0.92	1	Yes
WordPress Simple File List - Unauthenticated RCE CVE-2020-36847	Network Scanner	Nov 25, 2025	Critical(9.8)	0.45	0.99	Yes
ASP.NET Core - Request Smuggling CVE-2025-55315	Network Scanner	Nov 18, 2025	Critical(9.9)	0.66	1	Yes

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove