Hunt List
13,762 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-112241 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart sur | |
|
78
|
CVE-2019-25778 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that | |
|
78
|
CVE-2022-51021 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticat | |
|
77
|
CVE-2026-115355 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | Mistune before 3.3.0 contains a path traversal vulnerability in the Include dire | |
|
77
|
CVE-2025-34458 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit | |
|
77
|
CVE-2026-12245 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS c | |
|
77
|
CVE-2026-9716 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial- | |
|
77
|
CVE-2026-57023 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | An Improper Validation of Specified Quantity in Input vulnerability in the TCP p | |
|
77
|
CVE-2026-57026 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | An Improper Validation of Syntactic Correctness of Input vulnerability in the SI | |
|
77
|
CVE-2026-62328 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | 9Router through version 0.4.41 contain an unauthenticated information disclosure | |
|
77
|
CVE-2026-50032 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | A NULL pointer dereference in the MMS Write Named Variable List handler, which m | |
|
77
|
CVE-2026-54609 |
8.6 | 0.0046 | NET NO AUTH LOW CX NO UI | QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol libra | |
|
76
|
CVE-2026-59252 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unau | |
|
76
|
CVE-2026-55735 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Verification of Cryptographic Signature in ueberauth guardian allows an | |
|
75
|
CVE-2026-34483 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve | |
|
75
|
CVE-2026-28872 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A resource exhaustion issue was addressed with improved input validation. This i | |
|
75
|
CVE-2026-42583 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Netty is an asynchronous, event-driven network application framework. Prior to 4 | |
|
75
|
CVE-2026-59933 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
75
|
CVE-2026-59932 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
75
|
CVE-2026-96888 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A BIND resolver that is configured with both a "redirect" zone and "qname-minimi | |
|
75
|
CVE-2026-115909 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | zip is a zip library for Rust that supports reading and writing simple ZIP files | |
|
75
|
CVE-2026-20649 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A logging issue was addressed with improved data redaction. This issue is fixed | |
|
75
|
CVE-2026-11576 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error h | |
|
75
|
CVE-2026-48712 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior t | |
|
75
|
CVE-2026-53539 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, wh | |
|
75
|
CVE-2026-14193 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | DVP80ES300T with Improper Validation of Array Index Vulnerability | |
|
75
|
CVE-2026-12575 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. | |
|
75
|
CVE-2026-54712 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation a | |
|
75
|
CVE-2026-15053 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Tanium addressed a denial of service vulnerability in Tanium Server. | |
|
75
|
CVE-2026-21729 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Loki queries with large limits can cause large memory allocations which can impa | |
|
75
|
CVE-2026-59531 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 v | |
|
75
|
CVE-2026-15057 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerab | |
|
75
|
CVE-2026-47219 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | find-my-way is a framework-independent HTTP router that internally uses a Radix | |
|
75
|
CVE-2026-71202 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The raster Rust crate's crop function (src/editor.rs) clamps the crop width/heig | |
|
75
|
CVE-2026-48702 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Rekor is a software supply chain transparency log. Starting in version 0.3.0 and | |
|
75
|
CVE-2026-73997 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2 | |
|
75
|
CVE-2026-70906 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are af | |
|
75
|
CVE-2026-94640 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated | |
|
68
|
CVE-2026-13885 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowe | |
|
68
|
CVE-2026-57713 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events M | |
|
68
|
CVE-2026-28176 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions. | |
|
68
|
CVE-2025-40328 |
8.8 | 0.0046 | NET NO AUTH LOW CX | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
67
|
CVE-2026-75842 |
8.3 | 0.0046 | NET LOW CX NO UI | ArcadeDB versions before 26.8.1 contain an arbitrary file read vulnerability in | |
|
65
|
CVE-2026-106634 |
7.7 | 0.0046 | NET LOW CX NO UI | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to | |
|
65
|
CVE-2026-55790 |
7.4 | 0.0046 | NET NO AUTH LOW CX | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5. | |
|
65
|
CVE-2026-21584 |
7.6 | 0.0046 | NET LOW CX NO UI | This High severity Improper Authorization vulnerability was introduced in versio | |
|
64
|
CVE-2022-51025 |
7.1 | 0.0046 | NET LOW CX NO UI | Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerab | |
|
62
|
CVE-2026-116234 |
8.5 | 0.0046 | NET LOW CX NO UI | A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unk | |
|
59
|
CVE-2026-43680 |
7.2 | 0.0046 | NET LOW CX NO UI | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user w | |
|
59
|
CVE-2026-86380 |
7.2 | 0.0046 | NET LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS |