Hunt List
13,332 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2025-65656 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/E | |
|
80
|
CVE-2026-28911 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2025-68745 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x | |
|
80
|
CVE-2026-56451 |
10.0 | 0.0050 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in Opcenter X (All versions < V2604). Affect | |
|
80
|
CVE-2026-59500 |
10.0 | 0.0050 | NET NO AUTH LOW CX NO UI | : Improper Authentication vulnerability in Priority Portal Generator addon to Pr | |
|
80
|
CVE-2026-7664 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to ac | |
|
80
|
CVE-2026-68426 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix s | |
|
80
|
CVE-2026-66587 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. | |
|
78
|
CVE-2026-107015 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized a | |
|
78
|
CVE-2026-107032 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allo | |
|
78
|
CVE-2026-44761 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented | |
|
77
|
CVE-2026-60114 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path tra | |
|
77
|
CVE-2026-47394 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GH | |
|
77
|
CVE-2015-20124 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path trave | |
|
77
|
CVE-2024-58396 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerabili | |
|
77
|
CVE-2026-72581 |
8.6 | 0.0050 | NET NO AUTH LOW CX NO UI | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through | |
|
76
|
CVE-2026-114400 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | Trudesk through 1.2.11 contains a missing authentication vulnerability that allo | |
|
76
|
CVE-2026-116634 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability t | |
|
75
|
CVE-2026-72438 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: md/raid10: | |
|
75
|
CVE-2026-13182 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-st | |
|
75
|
CVE-2026-13183 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload me | |
|
75
|
CVE-2026-61609 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | Pterodactyl is a free, open-source game server management panel. From 1.7.0 unti | |
|
75
|
CVE-2026-82210 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) | |
|
68
|
CVE-2026-14431 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-14380 |
8.8 | 0.0050 | NET LOW CX NO UI | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-i | |
|
68
|
CVE-2026-15776 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allo | |
|
68
|
CVE-2026-13105 |
8.8 | 0.0050 | NET NO AUTH LOW CX | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip | |
|
68
|
CVE-2026-74946 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Information disclosure due to incorrect boundary conditions in the Graphics: Can | |
|
68
|
CVE-2026-8517 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.1 | |
|
68
|
CVE-2026-17082 |
8.8 | 0.0050 | NET LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain | |
|
67
|
CVE-2026-119654 |
8.7 | 0.0050 | NET LOW CX NO UI | DataCap through 2025.1.1 contains a missing authorization vulnerability that all | |
|
67
|
CVE-2026-63393 |
8.7 | 0.0050 | NET LOW CX NO UI | OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing | |
|
67
|
CVE-2026-54281 |
8.7 | 0.0050 | NET LOW CX NO UI | Nest is a framework for building scalable Node.js server-side applications. Prio | |
|
67
|
CVE-2026-66494 |
8.7 | 0.0050 | NET NO AUTH LOW CX | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API end | |
|
67
|
CVE-2026-62349 |
8.3 | 0.0050 | NET LOW CX NO UI | TDengine is an open source, time-series database optimized for Internet of Thing | |
|
66
|
CVE-2026-33833 |
8.2 | 0.0050 | NET NO AUTH LOW CX | Improper neutralization of special elements in output used by a downstream compo | |
|
64
|
CVE-2026-33770 |
7.1 | 0.0050 | NET LOW CX NO UI | WWBN AVideo is an open source video platform. In versions up to and including 26 | |
|
64
|
CVE-2026-62238 |
7.2 | 0.0050 | NET LOW CX NO UI | OpenRemote before 1.26.0 contain an authenticated SQL injection vulnerability in | |
|
64
|
CVE-2026-72440 |
7.1 | 0.0050 | NET LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: md/raid1: f | |
|
63
|
CVE-2026-27064 |
9.1 | 0.0050 | NET LOW CX NO UI | Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. | |
|
63
|
CVE-2026-65461 |
9.1 | 0.0050 | NET LOW CX NO UI | Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 version | |
|
63
|
CVE-2026-94290 |
9.1 | 0.0050 | NET LOW CX NO UI | SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller us | |
|
62
|
CVE-2026-67244 |
8.6 | 0.0050 | NET LOW CX NO UI | A format string vulnerability was found in the Notification OAuth settings of AD | |
|
59
|
CVE-2026-13372 |
7.2 | 0.0050 | NET LOW CX NO UI | Incorrect link resolution by display name in the custom PowerShell VPN editor in | |
|
59
|
CVE-2026-40712 |
7.2 | 0.0050 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improp | |
|
59
|
CVE-2026-40714 |
7.2 | 0.0050 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improp | |
|
59
|
CVE-2026-46738 |
7.2 | 0.0050 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improp | |
|
59
|
CVE-2026-54416 |
7.2 | 0.0050 | NET LOW CX NO UI | Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-mana | |
|
56
|
CVE-2026-23879 |
8.0 | 0.0050 | NET LOW CX | py7zr is a Python-based library and utility to support 7zip archive compression, | |
|
55
|
CVE-2026-116489 |
7.7 | 0.0050 | NET NO UI | Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability tha |