Skip to main content
HomePentest-Tools.com Logo
Start free trial

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.635 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 223 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 223

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)OpenSSH musl - Authentication Bypass (CVE-2026-123158 - *sshole)
CVE-2026-123158
Network Scanner

High(8.1)

0.170.98Yes
Cybersecurity Infrastructure Security Agency (CISA)LiteLLM - Remote Code Execution
CVE-2026-42271
Network Scanner

Critical(9.8)

0.921Yes
Cybersecurity Infrastructure Security Agency (CISA)LiteLLM - SQL Injection
CVE-2026-42208
Network Scanner

Critical(9.8)

0.91Yes
Cybersecurity Infrastructure Security Agency (CISA)Node.js - Remote Code Execution
CVE-2026-111497
Network Scanner

Critical(9.2)

0.831Yes
Cybersecurity Infrastructure Security Agency (CISA)Langflow < 1.9.0 - Remote Code Execution
CVE-2026-33017
Network Scanner

Critical(9.8)

0.971Yes
WordPress WPMU DEV Dashboard - Authentication Bypass
CVE-2026-76581
Network Scanner

Critical(9.8)

0.010.39Yes
Cybersecurity Infrastructure Security Agency (CISA)Zimbra Collaboration Suite - Remote Code Execution
CVE-2026-73570
Network Scanner

High(8.9)

0.771Yes
Cybersecurity Infrastructure Security Agency (CISA)Gitea - Remote Code Execution
CVE-2026-60004
Network Scanner

Critical(9.8)

0.240.98Yes
dotCMS - SQL Injection
CVE-2026-8054
Network Scanner

Critical(9.8)

0.020.76Yes
Cybersecurity Infrastructure Security Agency (CISA)Adobe Commerce/Magento - Account Takeover via Customer Session Identity Switch
CVE-2026-71362
Network Scanner

Critical(9.1)

0.921Yes
Cybersecurity Infrastructure Security Agency (CISA)N-able N-central - Pre-Authentication Remote Code Execution
CVE-2026-86218
Network Scanner

Critical(10)

0.160.97Yes
Cybersecurity Infrastructure Security Agency (CISA)Metabase - Unauthenticated SQL Injection
CVE-2026-72898
Network Scanner

Critical(10)

0.991Yes
Cybersecurity Infrastructure Security Agency (CISA)JFrog Artifactory - Authentication Bypass
CVE-2026-82329
Network Scanner

Critical(9.8)

0.150.97Yes
Cybersecurity Infrastructure Security Agency (CISA)Citrix NetScaler - Remote Code Execution
CVE-2026-88771
Network Scanner

Critical(9.5)

0.821Yes
Cybersecurity Infrastructure Security Agency (CISA)WordPress Core - Remote Code Execution
CVE-2026-87902
Network Scanner

Critical(9.2)

0.961Yes
Cybersecurity Infrastructure Security Agency (CISA)Magento - Remote Code Execution
CVE-2026-75650
Network Scanner

Critical(10)

11Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla SP Page Builder - Remote Code Execution
CVE-2026-48908
Network Scanner

Critical(9.8)

0.91Yes
n8n - Remote Code Execution
CVE-2026-21858
Network Scanner

Critical(10)

0.791Yes
GitLab - Arbitrary Method Invocation
CVE-2026-19478
Network Scanner

Critical(9.4)

0.030.83Yes
Cybersecurity Infrastructure Security Agency (CISA)GitLab - Arbitrary File Read
CVE-2026-85706
Network Scanner

Critical(10)

0.981Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla Page Builder CK - Remote Code Execution
CVE-2026-56290
Network Scanner

Critical(9.8)

0.310.99Yes
Cybersecurity Infrastructure Security Agency (CISA)Laravel Livewire - Remote Code Execution
CVE-2025-54068
Network Scanner

Critical(9.8)

0.971Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla Balbooa Forms - Remote Code Execution
CVE-2026-56291
Network Scanner

Critical(9.8)

0.150.97Yes
SonicWall GMS - Remote Code Execution
CVE-2026-66147
Network Scanner

Critical(9.8)

0.020.79Yes
Ruby on Rails Active Storage - Remote Code Execution
CVE-2026-66066
Network Scanner

Critical(10)

0.330.99Yes