Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.312 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 195 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Is exploitable with Sniper

Is in CISA catalog

Detectable with

Displaying 1 - 25 results out of 957

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass CVE-2026-64849	Network Scanner	Aug 19, 2026	Critical(9.3)	0.17	0.97	No
Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization CVE-2019-1003030	Network Scanner	Aug 18, 2026	Critical(9.9)	0.97	1	No
SimpleHelp <= 5.5.7 - Privilege Escalation CVE-2024-57726	Network Scanner	Aug 17, 2026	Critical(9.9)	0.67	1	No
Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE CVE-2026-58644	Network Scanner	Aug 14, 2026	Critical(9.8)	0.16	0.97	No
Metabase - Unauthenticated SQL Injection CVE-2026-72898	Network Scanner	Aug 12, 2026	Critical(10)	0.8	1	No
JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution CVE-2026-63077	Network Scanner	Aug 10, 2026	Critical(9.8)	0.85	1	No
React Native Community CLI - Unauthenticated OS Command Injection CVE-2025-11953	Network Scanner	Aug 10, 2026	Critical(9.8)	0.94	1	No
Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE CVE-2026-48939	Network Scanner	Aug 10, 2026	Critical(9.8)	0.2	0.98	No
ForgeRock AM/OpenAM - Remote Code Execution CVE-2021-35464	Network Scanner	Aug 4, 2026	Critical(9.8)	1	1	Yes
Check Point Security Management Server - SmartConsole Authentication Bypass CVE-2026-16232	Network Scanner	Jul 29, 2026	Critical(9.8)	0.9	1	No
IBM Langflow - Remote Code Execution CVE-2026-9198	Network Scanner	Jul 28, 2026	Critical(9.8)	0.38	0.99	No
Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE CVE-2026-48908	Network Scanner	Jul 23, 2026	Critical(9.8)	0.15	0.97	No
Adobe ColdFusion - RDS Arbitrary File Write CVE-2026-48282	Network Scanner	Jul 22, 2026	Critical(10)	0.43	0.99	Yes
Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload CVE-2026-56290	Network Scanner	Jul 22, 2026	Critical(9.8)	0.31	0.99	No
SonicWall SMA1000 - Server-Side Request Forgery CVE-2026-15409	Network Scanner	Jul 22, 2026	Critical(10)	0.84	1	No
Joomla JCE - Remote Code Execution CVE-2026-48907	Network Scanner	Jul 21, 2026	Critical(10)	0.79	1	Yes
Apache ActiveMQ - Remote Code Execution CVE-2026-34197	Network Scanner	Jul 21, 2026	High(8.8)	0.98	1	Yes
wp2shell - WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.98	1	No
Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload CVE-2026-56291	Network Scanner	Jul 18, 2026	Critical(9.8)	0.15	0.97	No
wp2shell - WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1 - Pre-Auth Batch-Route Confusion leading to SQL Injection CVE-2026-63030	Network Scanner	Jul 18, 2026	Critical(9.8)	0.98	1	Yes
Adobe ColdFusion - RDS Arbitrary File Write CVE-2026-48282	Network Scanner	Jul 8, 2026	Critical(10)	0.43	0.99	No
Progress ADC LoadMaster - Command Injection CVE-2026-8037	Network Scanner	Jul 2, 2026	Critical(9.6)	1	1	No
D-Link DIR-823X set_prohibiting - Command Injection CVE-2025-29635	Network Scanner	Jun 29, 2026	High(7.2)	0.88	1	No
Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE CVE-2026-35273	Network Scanner	Jun 19, 2026	Critical(9.8)	0.96	1	No
Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass CVE-2026-50751	Network Scanner	Jun 17, 2026	Critical(10)	0.84	1	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove