Skip to main content
HomePentest-Tools.com Logo
Start free trial

Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.552 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 210 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Displaying 1 - 25 results out of 1007

Pentest-Tools.com Vulnerabilities
Name
Detectable with
Detection added
CVSSv3
EPSS Score
EPSS Percentile
Exploitable
with Sniper
Cybersecurity Infrastructure Security Agency (CISA)AhsayCBS <= 10.3.4 - Unauthenticated RCE
CVE-2026-105134
Network Scanner

Critical(10)

0.871No
Cybersecurity Infrastructure Security Agency (CISA)Red Hat JBoss - Web/JMX Console Access
CVE-2010-1428
Network Scanner

High(7.5)

0.530.99No
Cybersecurity Infrastructure Security Agency (CISA)Cisco Identity Services Engine - ise-kong API Gateway Authentication Bypass
CVE-2026-76460
Network Scanner

Critical(10)

0.761No
Cybersecurity Infrastructure Security Agency (CISA)AhsayCBS - JSON API Authentication Bypass
CVE-2026-105133
Network Scanner

High(7.3)

0.81No
Cybersecurity Infrastructure Security Agency (CISA)PHP2Shell - Remote Code Execution (CVE-2026-109618 & CVE-2026-109619)
CVE-2026-109618
Network Scanner

Critical(9.2)

11No
Cybersecurity Infrastructure Security Agency (CISA)JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering
CVE-2010-0738
Network Scanner

Critical(9.8)

0.741No
Cybersecurity Infrastructure Security Agency (CISA)Check Point Security Management - Unauthenticated Directory Traversal to RCE
CVE-2026-93616
Network Scanner

Critical(9.8)

0.921No
Cybersecurity Infrastructure Security Agency (CISA)Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header
CVE-2026-104935
Network Scanner

Critical(10)

0.871No
Cybersecurity Infrastructure Security Agency (CISA)Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal
CVE-2022-27925
Network Scanner

High(7.2)

0.991No
Cybersecurity Infrastructure Security Agency (CISA)Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File Read
CVE-2026-21589
Network Scanner

Critical(9.8)

11No
Cybersecurity Infrastructure Security Agency (CISA)Citrix NetScaler - Remote Code Execution
CVE-2026-88771
Network Scanner

Critical(9.5)

0.831Yes
Cybersecurity Infrastructure Security Agency (CISA)WordPress Core - Remote Code Execution
CVE-2026-87902
Network Scanner

Critical(9.2)

0.961Yes
Cybersecurity Infrastructure Security Agency (CISA)Magento - Remote Code Execution
CVE-2026-75650
Network Scanner

Critical(10)

0.040.91Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla Page Builder CK - Remote Code Execution
CVE-2026-56290
Network Scanner

Critical(9.8)

0.310.99Yes
Cybersecurity Infrastructure Security Agency (CISA)Joomla SP Page Builder - Remote Code Execution
CVE-2026-48908
Network Scanner

Critical(9.8)

0.891Yes
Cybersecurity Infrastructure Security Agency (CISA)GitLab - Arbitrary File Read
CVE-2026-85706
Network Scanner

Critical(10)

0.981Yes
Cybersecurity Infrastructure Security Agency (CISA)SimpleHelp <= 5.5.7 - Arbitrary File Upload
CVE-2024-57728
Network Scanner

High(7.2)

0.651No
Cybersecurity Infrastructure Security Agency (CISA)WordPress Core - PHP Template Path Traversal
CVE-2026-87902
Network Scanner

Critical(9.2)

0.961No
Cybersecurity Infrastructure Security Agency (CISA)Ray < 2.52.0 - Remote Code Execution
CVE-2025-62593
Network Scanner

Critical(9.8)

0.631No
Cybersecurity Infrastructure Security Agency (CISA)Joomla Balbooa Forms - Remote Code Execution
CVE-2026-56291
Network Scanner

Critical(9.8)

0.150.97Yes
Cybersecurity Infrastructure Security Agency (CISA)Laravel Livewire - Remote Code Execution
CVE-2025-54068
Network Scanner

Critical(9.8)

0.971Yes
Cybersecurity Infrastructure Security Agency (CISA)JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass
CVE-2026-42018
Network Scanner

High(7.5)

0.10.96No
Cybersecurity Infrastructure Security Agency (CISA)Ivanti EPMM < 12.8.0.0 - Remote Code Execution
CVE-2026-1340
Network Scanner

Critical(9.8)

0.991No
Cybersecurity Infrastructure Security Agency (CISA)N-able N-central <2026.3.1.14 - Pre-Authentication Remote Code Execution
CVE-2026-86218
Network Scanner

Critical(10)

0.160.97No
Cybersecurity Infrastructure Security Agency (CISA)Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
CVE-2026-1281
Network Scanner

Critical(9.8)

0.991No