Hunt List
13,801 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-8982 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware | |
|
78
|
CVE-2026-33117 |
9.1 | 0.0048 | NET NO AUTH LOW CX NO UI | The Java Key Vault Keys library in the Azure SDK for Java contains an issue in t | |
|
78
|
CVE-2026-68083 |
9.1 | 0.0048 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix | |
|
77
|
CVE-2026-65623 |
8.7 | 0.0048 | NET NO AUTH LOW CX NO UI | Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauth | |
|
77
|
CVE-2026-54729 |
8.7 | 0.0048 | NET NO AUTH LOW CX NO UI | DSSRF is a Node.js library that provides a wide range of utilities and advanced | |
|
76
|
CVE-2026-55952 |
8.2 | 0.0048 | NET NO AUTH LOW CX NO UI | The Erlang/OTP ssl application does not validate that the PSK identity list and | |
|
76
|
CVE-2026-114644 |
8.2 | 0.0048 | NET NO AUTH LOW CX NO UI | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumpti | |
|
76
|
CVE-2025-40337 |
8.2 | 0.0048 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: stmmac | |
|
75
|
CVE-2026-42189 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | Russh is a Rust SSH client & server library. Prior to version 0.60.1, a pre-auth | |
|
75
|
CVE-2026-54283 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, reque | |
|
75
|
CVE-2026-53482 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release ver | |
|
75
|
CVE-2026-72606 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | A server-side request forgery vulnerability in Pinry through 2.1.13 allows unaut | |
|
70
|
CVE-2026-55500 |
9.9 | 0.0048 | NET LOW CX NO UI | 9Router is an AI router & token saver. Prior to 0.4.80, the /api/settings/databa | |
|
70
|
CVE-2026-56027 |
9.9 | 0.0048 | NET LOW CX NO UI | Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions. | |
|
70
|
CVE-2026-56058 |
9.9 | 0.0048 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions. | |
|
70
|
CVE-2026-56059 |
9.9 | 0.0048 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions. | |
|
70
|
CVE-2026-27419 |
9.9 | 0.0048 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions. | |
|
70
|
CVE-2026-57710 |
9.9 | 0.0048 | NET LOW CX NO UI | Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud Wo | |
|
70
|
CVE-2026-32463 |
9.9 | 0.0048 | NET LOW CX NO UI | Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions | |
|
70
|
CVE-2026-32474 |
9.9 | 0.0048 | NET LOW CX NO UI | Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions. | |
|
70
|
CVE-2026-66627 |
9.9 | 0.0048 | NET LOW CX NO UI | Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios | |
|
70
|
CVE-2026-74014 |
9.9 | 0.0048 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions. | |
|
69
|
CVE-2026-7165 |
9.4 | 0.0048 | NET LOW CX NO UI | The vulnerability is present in the ‘/addJugador’ endpoint: * The 'keyJugador | |
|
69
|
CVE-2026-22752 |
9.6 | 0.0048 | NET LOW CX NO UI | Authentication bypass by primary weakness vulnerability in Spring Security Sprin | |
|
69
|
CVE-2026-17691 |
9.6 | 0.0048 | NET NO AUTH LOW CX | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 | |
|
69
|
CVE-2026-17695 |
9.6 | 0.0048 | NET NO AUTH LOW CX | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.792 | |
|
68
|
CVE-2026-119418 |
9.2 | 0.0048 | NET NO AUTH NO UI | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attack | |
|
68
|
CVE-2026-89091 |
8.8 | 0.0048 | NET NO AUTH LOW CX | A flaw was found in ansible-core. When installing a collection with `ansible-gal | |
|
68
|
CVE-2026-55772 |
8.8 | 0.0048 | NET LOW CX NO UI | CedarJava is an open source Java implementation of the Cedar policy language, us | |
|
68
|
CVE-2026-17677 |
8.8 | 0.0048 | NET NO AUTH LOW CX | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0 | |
|
68
|
CVE-2026-72557 |
8.8 | 0.0048 | NET LOW CX NO UI | An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authentica | |
|
67
|
CVE-2026-49226 |
8.3 | 0.0048 | NET LOW CX NO UI | Vvveb is a powerful and easy to use CMS with page builder to build websites, blo | |
|
67
|
CVE-2026-49224 |
8.3 | 0.0048 | NET LOW CX NO UI | Vvveb is a powerful and easy to use CMS with page builder to build websites, blo | |
|
67
|
CVE-2026-49225 |
8.3 | 0.0048 | NET LOW CX NO UI | Vvveb is a powerful and easy to use CMS with page builder to build websites, blo | |
|
67
|
CVE-2026-57856 |
8.7 | 0.0048 | NET LOW CX NO UI | Cockpit CMS contains a path traversal vulnerability in the Bucket file storage A | |
|
66
|
CVE-2026-69830 |
8.1 | 0.0048 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-7769 |
8.1 | 0.0048 | NET LOW CX NO UI | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2 | |
|
65
|
CVE-2026-73498 |
7.7 | 0.0048 | NET LOW CX NO UI | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C | |
|
65
|
CVE-2026-6560 |
7.4 | 0.0048 | NET LOW CX NO UI | A security vulnerability has been detected in H3C Magic B0 up to 100R002. This v | |
|
65
|
CVE-2026-6563 |
7.4 | 0.0048 | NET LOW CX NO UI | A vulnerability has been found in H3C Magic B1 up to 100R004. The affected eleme | |
|
65
|
CVE-2026-7684 |
7.4 | 0.0048 | NET LOW CX NO UI | A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This | |
|
65
|
CVE-2026-7685 |
7.4 | 0.0048 | NET LOW CX NO UI | A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unkn | |
|
65
|
CVE-2026-71880 |
7.6 | 0.0048 | NET LOW CX NO UI | Interpretation of untrusted input in template engine in GBIF Integrated Publishi | |
|
65
|
CVE-2026-73495 |
7.4 | 0.0048 | NET NO AUTH NO UI | blaze is a Scala library for building asynchronous pipelines, with a focus on ne | |
|
64
|
CVE-2026-57187 |
7.1 | 0.0048 | NET LOW CX NO UI | Asterisk is an open source private branch exchange and telephony toolkit. Prior | |
|
64
|
CVE-2026-68553 |
7.1 | 0.0048 | NET LOW CX NO UI | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4. | |
|
63
|
CVE-2026-90864 |
9.1 | 0.0048 | NET LOW CX NO UI | A path traversal vulnerability in Progress Software WS_FTP Server versions prior | |
|
62
|
CVE-2026-42930 |
8.5 | 0.0048 | NET LOW CX NO UI | When running in Appliance mode, an authenticated attacker assigned the 'Administ | |
|
62
|
CVE-2026-19843 |
8.4 | 0.0048 | NET LOW CX | 1 PoC | A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor construct |
|
60
|
CVE-2026-8764 |
7.3 | 0.0048 | NET LOW CX NO UI | A security vulnerability has been detected in H3C Magic B3 up to 100R002. This a |