Hunt List
13,760 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-20156 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-14960 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionali | |
|
80
|
CVE-2026-102649 |
9.9 | 0.0046 | NET NO AUTH LOW CX NO UI | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes oper | |
|
80
|
CVE-2026-4277 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4 | |
|
79
|
CVE-2026-12693 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. | |
|
79
|
CVE-2026-116214 |
9.3 | 0.0046 | NET NO AUTH LOW CX NO UI | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability | |
|
79
|
CVE-2026-119716 |
9.3 | 0.0046 | NET NO AUTH LOW CX NO UI | pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulner | |
|
78
|
CVE-2026-32327 |
9.1 | 0.0046 | NET NO AUTH LOW CX NO UI | A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack ag | |
|
78
|
CVE-2026-54218 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamD | |
|
77
|
CVE-2026-69089 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermar | |
|
77
|
CVE-2026-64649 |
8.3 | 0.0046 | NET NO AUTH LOW CX NO UI | Next.js is a React framework for building full-stack web applications. In versio | |
|
77
|
CVE-2026-50039 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | The affected product is vulnerable to a stack-based buffer overflow, which may a | |
|
77
|
CVE-2026-93434 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication | |
|
77
|
CVE-2026-46391 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in | |
|
76
|
CVE-2026-116540 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contai | |
|
75
|
CVE-2026-70906 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are af | |
|
75
|
CVE-2026-94640 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated | |
|
75
|
CVE-2026-84747 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Interpretation conflict in the HTTP protocol implementation in Apache bRPC (vers | |
|
75
|
CVE-2026-56833 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4. | |
|
75
|
CVE-2026-108088 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vu | |
|
75
|
CVE-2026-39734 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. | |
|
75
|
CVE-2026-73960 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
75
|
CVE-2026-50645 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | There is no restriction on the amount of attachment headers that a message can c | |
|
75
|
CVE-2026-13753 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Certain HP DeskJet All-in-One printers may be potentially vulnerable to informat | |
|
75
|
CVE-2026-113729 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Moov signedxml is a pure Go library for processing signed XML documents. Prior t | |
|
75
|
CVE-2026-45617 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure Ja | |
|
75
|
CVE-2026-56455 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to | |
|
75
|
CVE-2026-14970 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing dur | |
|
75
|
CVE-2026-107026 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unaut | |
|
75
|
CVE-2026-23451 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: bonding: pr | |
|
75
|
CVE-2026-93904 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin | |
|
70
|
CVE-2026-61728 |
9.9 | 0.0046 | NET LOW CX NO UI | SOCFortress CoPilot focuses on providing a single pane of glass for all your sec | |
|
68
|
CVE-2024-32507 |
8.8 | 0.0046 | NET LOW CX NO UI | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone nu | |
|
67
|
CVE-2026-65897 |
8.7 | 0.0046 | NET LOW CX NO UI | Grav API Plugin versions before 1.0.10 fail to validate the groups field in Invi | |
|
67
|
CVE-2026-111352 |
8.7 | 0.0046 | NET LOW CX NO UI | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in Rest | |
|
66
|
CVE-2026-46851 |
8.1 | 0.0046 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle | |
|
66
|
CVE-2026-70468 |
8.1 | 0.0046 | NET NO AUTH NO UI | A authentication bypass using an alternate path or channel vulnerability in Fort | |
|
65
|
CVE-2026-49287 |
7.4 | 0.0046 | NET NO AUTH NO UI | Statamic is a Laravel and Git powered content management system (CMS). Prior to | |
|
64
|
CVE-2026-9856 |
7.1 | 0.0046 | NET NO AUTH LOW CX | A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an atta | |
|
64
|
CVE-2026-70622 |
7.1 | 0.0046 | NET LOW CX NO UI | tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in | |
|
64
|
CVE-2026-115508 |
7.1 | 0.0046 | NET LOW CX NO UI | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexit | |
|
64
|
CVE-2026-28941 |
7.1 | 0.0046 | NET NO AUTH LOW CX | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 | |
|
64
|
CVE-2026-70475 |
7.1 | 0.0046 | NET LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
63
|
CVE-2026-67074 |
9.1 | 0.0046 | NET LOW CX NO UI | HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may all | |
|
62
|
CVE-2026-74041 |
8.6 | 0.0046 | NET LOW CX NO UI | Wazuh 4.14.3 before 4.14.8 and 4.10.4 contains a case-sensitivity mismatch betwe | |
|
59
|
CVE-2026-62350 |
7.2 | 0.0046 | NET LOW CX NO UI | TDengine is an open source, time-series database optimized for Internet of Thing | |
|
59
|
CVE-2026-43685 |
7.2 | 0.0046 | NET LOW CX NO UI | A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user w | |
|
55
|
CVE-2026-18526 |
7.4 | 0.0046 | NET LOW CX | HumHub Community Edition 1.18.4 and 1.18.4-pl1 contain a stored Cross-Site Scrip | |
|
55
|
CVE-2026-98497 |
7.5 | 0.0046 | NET NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
55
|
CVE-2025-64193 |
7.5 | 0.0046 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP |