Hunt List
13,710 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-49781 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions. | |
|
80
|
CVE-2025-65656 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/E | |
|
80
|
CVE-2026-28911 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2025-68745 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x | |
|
80
|
CVE-2026-56451 |
10.0 | 0.0050 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in Opcenter X (All versions < V2604). Affect | |
|
80
|
CVE-2026-59500 |
10.0 | 0.0050 | NET NO AUTH LOW CX NO UI | : Improper Authentication vulnerability in Priority Portal Generator addon to Pr | |
|
80
|
CVE-2026-7664 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to ac | |
|
80
|
CVE-2026-68426 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix s | |
|
78
|
CVE-2026-25199 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Instances deployed via the Proxmox extension allow unauthorized access to instan | |
|
78
|
CVE-2026-107015 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized a | |
|
78
|
CVE-2026-107032 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allo | |
|
78
|
CVE-2026-44761 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented | |
|
77
|
CVE-2026-60114 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path tra | |
|
77
|
CVE-2026-47394 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GH | |
|
77
|
CVE-2015-20124 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path trave | |
|
77
|
CVE-2024-58396 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerabili | |
|
76
|
CVE-2026-114400 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | Trudesk through 1.2.11 contains a missing authentication vulnerability that allo | |
|
76
|
CVE-2026-116634 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability t | |
|
75
|
CVE-2026-55727 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | A flaw in the authentication mechanism for video stream requests in Genetec Secu | |
|
75
|
CVE-2026-56846 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade | |
|
75
|
CVE-2026-72438 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: md/raid10: | |
|
68
|
CVE-2026-41453 |
8.7 | 0.0050 | NET LOW CX NO UI | Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the lead | |
|
68
|
CVE-2026-14431 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-14380 |
8.8 | 0.0050 | NET LOW CX NO UI | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-i | |
|
68
|
CVE-2026-15776 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allo | |
|
68
|
CVE-2026-13105 |
8.8 | 0.0050 | NET NO AUTH LOW CX | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip | |
|
68
|
CVE-2026-74946 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Information disclosure due to incorrect boundary conditions in the Graphics: Can | |
|
68
|
CVE-2026-8517 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.1 | |
|
68
|
CVE-2026-17082 |
8.8 | 0.0050 | NET LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain | |
|
67
|
CVE-2026-119654 |
8.7 | 0.0050 | NET LOW CX NO UI | DataCap through 2025.1.1 contains a missing authorization vulnerability that all | |
|
67
|
CVE-2026-63393 |
8.7 | 0.0050 | NET LOW CX NO UI | OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing | |
|
67
|
CVE-2026-54281 |
8.7 | 0.0050 | NET LOW CX NO UI | Nest is a framework for building scalable Node.js server-side applications. Prio | |
|
67
|
CVE-2026-66494 |
8.7 | 0.0050 | NET NO AUTH LOW CX | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API end | |
|
66
|
CVE-2026-47398 |
8.1 | 0.0050 | NET NO AUTH NO UI | PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which | |
|
66
|
CVE-2025-58885 |
8.1 | 0.0050 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
65
|
CVE-2026-62669 |
7.4 | 0.0050 | NET NO AUTH NO UI | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prio | |
|
64
|
CVE-2026-52865 |
7.1 | 0.0050 | NET LOW CX NO UI | When NGINX Ingress Controller processes Ingress or TransportServer resources, an | |
|
64
|
CVE-2026-33770 |
7.1 | 0.0050 | NET LOW CX NO UI | WWBN AVideo is an open source video platform. In versions up to and including 26 | |
|
63
|
CVE-2026-27064 |
9.1 | 0.0050 | NET LOW CX NO UI | Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. | |
|
63
|
CVE-2026-65461 |
9.1 | 0.0050 | NET LOW CX NO UI | Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 version | |
|
63
|
CVE-2026-94290 |
9.1 | 0.0050 | NET LOW CX NO UI | SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller us | |
|
62
|
CVE-2026-79880 |
8.7 | 0.0050 | NET LOW CX NO UI | A vulnerability in the command line interface of AOS-8 could allow an authentica | |
|
62
|
CVE-2026-67244 |
8.6 | 0.0050 | NET LOW CX NO UI | A format string vulnerability was found in the Notification OAuth settings of AD | |
|
59
|
CVE-2026-13372 |
7.2 | 0.0050 | NET LOW CX NO UI | Incorrect link resolution by display name in the custom PowerShell VPN editor in | |
|
59
|
CVE-2026-40712 |
7.2 | 0.0050 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improp | |
|
59
|
CVE-2026-40714 |
7.2 | 0.0050 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improp | |
|
59
|
CVE-2026-46738 |
7.2 | 0.0050 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improp | |
|
59
|
CVE-2026-54416 |
7.2 | 0.0050 | NET LOW CX NO UI | Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-mana | |
|
58
|
CVE-2026-19004 |
8.8 | 0.0050 | NET NO AUTH | An application using the MongoDB BI Connector ODBC Driver may experience a memor | |
|
57
|
CVE-2026-55765 |
8.5 | 0.0050 | NET NO UI | CloudNativePG is a platform designed to manage PostgreSQL databases within Kuber |