All 7 CVE vulnerabilities found in Pentestify, with AI-generated Chinese analysis, references, and POCs.
Vendor: Pentestify
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76203 | CSS sanitizer bypass in Pentestify report themes allows forced outbound requests CWE-180 | 5.1 | Medium | 2026-08-19 |
| CVE-2026-19744 | Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes CWE-79 | 5.1 | Medium | 2026-08-13 |
| CVE-2026-19716 | Stored Cross-site Scripting in Pentestify user account deletion via unescaped username CWE-79 | 5.1 | Medium | 2026-08-13 |
| CVE-2026-19434 | Stored Cross-site Scripting in Pentestify finding severity field CWE-79 | 5.1 | Medium | 2026-08-11 |
| CVE-2026-59231 | Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs CWE-918 | 5.3 | Medium | 2026-07-31 |
| CVE-2026-59238 | Stored XSS in Pentestify via unsanitized finding images and report client logo CWE-79 | - | - | 2026-07-20 |
| CVE-2026-13150 | SSRF in Pentestify PDF generation endpoint via Host header CWE-918 | - | - | 2026-06-24 |
All 7 known CVE vulnerabilities affecting Pentestify with full Chinese analysis, references, and POCs where available.