Vulnerability & Exploit Database

This is the list of vulnerabilities you can detect with Pentest-Tools.com and the exploits currently available in the platform.

We detect more than 17.415 vulnerabilities with multiple tools (Network Scanner, Website Scanner, Wordpress Scanner, and more) and we also have 199 exploit modules in Sniper to validate the risk level of critical CVEs.

Display

Search results for: SSRF

Displaying 1 - 25 results out of 192

Pentest-Tools.com Vulnerabilities
Name	Detectable with	Detection added	CVSSv3	EPSS Score	EPSS Percentile	Exploitable with Sniper
Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist Bypass CVE-2026-60105	Network Scanner	Sep 9, 2026	High(8.6)	0.02	0.79	No
SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDB CVE-2026-83548	Network Scanner	Sep 9, 2026	Critical(10)	0.05	0.92	No
Gotenberg < 8.31.0 - Server-Side Request Forgery CVE-2026-42596	Network Scanner	Aug 31, 2026	Critical(9.8)	0.02	0.68	No
Gotenberg < 8.34.0 - Local File Disclosure CVE-2026-55229	Network Scanner	Aug 30, 2026	High(7.5)	0.02	0.74	No
Ech0 < 4.2.8 - Server-Side Request Forgery CVE-2026-35037	Network Scanner	Aug 20, 2026	High(7.2)	0.01	0.48	No
MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass CVE-2026-64849	Network Scanner	Aug 19, 2026	Critical(9.3)	0.17	0.97	No
Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler CVE-2026-16268	Network Scanner	Aug 17, 2026	Medium(5.3)	0.01	0.38	No
Dgraph <=v25.3.0 - Admin Mutation Missing Authorization CVE-2026-34976	Network Scanner	Aug 13, 2026	Critical(10)	0.03	0.81	No
crawl4ai < 0.8.9 - Server Side Request Forgery CVE-2026-53755	Network Scanner	Aug 13, 2026	High(8.2)	0.02	0.75	No
FormCraft3 <= 3.9.15 - Server-Side Request Forgery CVE-2026-65442	Network Scanner	Aug 10, 2026	High(7.2)	0.01	0.36	No
Apache Tika - XXE Injection CVE-2025-54988	Network Scanner	Jul 30, 2026	Critical(9.8)	0.38	0.99	No
Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload CVE-2026-3335	Network Scanner	Jul 28, 2026	Medium(5.3)	0.02	0.66	No
Dify < 1.13.0 - Unauthenticated SSRF via Remote File Upload	Network Scanner	Jun 20, 2026	High	N/A	N/A	No
BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery CVE-2020-36884	Network Scanner	Jun 3, 2026	Medium	0.02	0.65	No
WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF CVE-2026-7798	Network Scanner	Jun 1, 2026	Medium(5.4)	0.01	0.52	No
Next.js WebSocket Upgrade Handler - SSRF CVE-2026-44578	Network Scanner	May 16, 2026	High(8.6)	0.39	0.99	No
MagicMirror <= 2.35.0 - Server-Side Request Forgery CVE-2026-42281	Network Scanner	May 14, 2026	Critical(9.2)	0.02	0.75	No
Astro SSR - Server-Side Request Forgery CVE-2026-25545	Network Scanner	May 7, 2026	High(8.6)	0.02	0.77	No
LMDeploy - Server-Side Request Forgery CVE-2026-33626	Network Scanner	May 1, 2026	High(7.5)	0.46	0.99	No
LolLMS < 2.2.0 - Server-Side Request Forgery CVE-2026-0560	Network Scanner	Apr 22, 2026	High(7.5)	0.02	0.77	No
Arcane <= 1.17.2 - Server-Side Request Forgery CVE-2026-40242	Network Scanner	Apr 17, 2026	High(7.2)	0.01	0.49	No
WSO2 - Server Side Request Forgery CVE-2025-5350	Network Scanner	Apr 13, 2026	Medium(5.9)	0.01	0.46	No
Stirling-PDF < 1.1.0 - Server-Side Request Forgery CVE-2025-55150	Network Scanner	Apr 10, 2026	Critical(9.8)	0.02	0.76	No
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound) CVE-2021-28481	Network Scanner	Apr 9, 2026	Critical(9.8)	0.37	0.99	No
BMC FootPrints 'feedUrl' - Server-Side Request Forgery CVE-2025-71259	Network Scanner	Mar 20, 2026	High(8.6)	0.13	0.97	No

Vulnerability & Exploit Database

One of EMEA's fastest-growing tech companies

Independently audited company-wide ISMS

50,000+ security folks are here. Are you?

Security leaders trust what they can prove