What’s Vulnerable › Products

maalfer Pentestify vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your maalfer Pentestify version is affected

Latest maalfer Pentestify vulnerabilities

• CVE-2026-76203 — CSS sanitizer bypass in Pentestify report themes allows forced outbound requests (CVSS 5.1)
• CVE-2026-19744 — Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes (CVSS 5.1)
• CVE-2026-19716 — Stored Cross-site Scripting in Pentestify user account deletion via unescaped username (CVSS 5.1)
• CVE-2026-19434 — Stored Cross-site Scripting in Pentestify finding severity field (CVSS 5.1)
• CVE-2026-59238 — Stored XSS in Pentestify via unsanitized finding images and report client logo (CVSS 6.9)