CVE
Metabase SQL Injection Check (CVE-2026-72898)
Flags Metabase by version for CVE-2026-72898 SQL injection, then confirms with a sleep probe. CISA KEV.
beta
This collection was built fully autonomously by AI. Every detector was researched from public CVE data, generated, and validated end to end with no human authoring. Detection fingerprints and flags by version first, then runs a non-intrusive confirm (sleep, public file, or unauthenticated GET). No exploitation. Beta: newly generated and still being refined.
CISA KEV Exposure Scanner
Drop 1 is 21 CISA KEV checks. Point them at your own hosts. Each fingerprints the product, flags by version, then runs a non-intrusive confirm: sleep, public-file read, or unauthenticated GET.
- CVE
LoadMaster Command Injection Check (CVE-2026-8037)
Flags LoadMaster by version for CVE-2026-8037 command injection, then confirms with an unauthenticated GET. CISA KEV.
- CVE
N-central Auth Bypass Check (CVE-2026-18577)
Flags N-central by version for CVE-2026-18577 authentication bypass, then confirms with an unauthenticated GET. CISA KEV.
- CVE
FortiOS Information Disclosure Check (CVE-2025-68686)
Flags FortiOS by version for CVE-2025-68686 information disclosure, then confirms with an unauthenticated GET. CISA KEV.
- CVE
UniFi OS Path Traversal Check (CVE-2026-34909)
Flags UniFi OS by version for CVE-2026-34909 path traversal, then confirms with a public-file read. CISA KEV.
- CVE
PAN-OS GlobalProtect Auth Bypass Check (CVE-2026-0257)
Flags PAN-OS GlobalProtect by version for CVE-2026-0257 authentication bypass, then confirms with an unauthenticated GET. CISA KEV.
- CVE
LiteLLM SQL Injection Check (CVE-2026-42208)
Flags LiteLLM by version for CVE-2026-42208 SQL injection, then confirms with a sleep probe. CISA KEV.
- CVE
ScreenConnect Path Traversal Check (CVE-2024-1708)
Flags ScreenConnect by version for CVE-2024-1708 path traversal, then confirms with a public-file read. CISA KEV.
- CVE
TeamCity Auth Bypass Check (CVE-2024-27199)
Flags TeamCity by version for CVE-2024-27199 authentication bypass, then confirms with an unauthenticated GET. CISA KEV.
- CVE
Langflow Code Injection Check (CVE-2026-33017)
Flags Langflow by version for CVE-2026-33017 code injection, then confirms with a sleep probe. CISA KEV.
- CVE
BeyondTrust Remote Support RCE Check (CVE-2026-1731)
Flags BeyondTrust RS/PRA by version for CVE-2026-1731 command injection, then confirms with a sleep probe. CISA KEV.
- CVE
FortiAnalyzer Auth Bypass Check (CVE-2026-24858)
Flags FortiAnalyzer and FortiManager by version for CVE-2026-24858 authentication bypass, then confirms with an unauthenticated GET. CISA KEV.
- CVE
SmarterMail Authentication Bypass Check (CVE-2026-23760)
Flags SmarterMail by version for CVE-2026-23760 authentication bypass, then confirms with an unauthenticated GET. CISA KEV.
- CVE
Grafana Path Traversal Check (CVE-2021-43798)
Flags Grafana by version for CVE-2021-43798 path traversal, then confirms with a public-file read. CISA KEV.
- CVE
NetWeaver Path Traversal Check (CVE-2017-12637)
Flags NetWeaver by version for CVE-2017-12637 path traversal, then confirms with a public-file read. CISA KEV.
- CVE
Jira Server and Data Center Path Traversal Check (CVE-2021-26086)
Flags Jira Server and Data Center by version for CVE-2021-26086 path traversal, then confirms with a public-file read. CISA KEV.
- CVE
vCenter Server Information Disclosure Check (CVE-2022-22948)
Flags vCenter by version for CVE-2022-22948 information disclosure, then confirms with an unauthenticated GET. CISA KEV.
- CVE
Quantum Security Gateways Information Disclosure Check (CVE-2024-24919)
Flags Check Point Quantum by version for CVE-2024-24919 information disclosure, then confirms with a public-file read. CISA KEV.
- CVE
BIG-IP Configuration Utility SQL Injection Check (CVE-2023-46748)
Flags BIG-IP Configuration Utility by version for CVE-2023-46748 SQL injection, then confirms with a sleep probe. CISA KEV.
- CVE
Openfire Path Traversal Check (CVE-2023-32315)
Flags Openfire by version for CVE-2023-32315 path traversal, then confirms with an unauthenticated GET. CISA KEV.
- CVE
MOVEit Transfer SQL Injection Check (CVE-2023-34362)
Flags MOVEit Transfer by version for CVE-2023-34362 SQL injection, then confirms with a sleep probe. CISA KEV.