Hunt List
13,715 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-14121 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 al | |
|
80
|
CVE-2026-99078 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
80
|
CVE-2026-99079 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
80
|
CVE-2023-54223 |
9.8 | 0.0045 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
79
|
CVE-2026-61203 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle People | |
|
79
|
CVE-2026-71166 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2026-71167 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2026-73920 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2023-54342 |
9.3 | 0.0046 | NET NO AUTH LOW CX NO UI | Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution v | |
|
79
|
CVE-2026-76932 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76933 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76936 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76937 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-82122 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB S | |
|
79
|
CVE-2026-86575 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects J | |
|
79
|
CVE-2026-86576 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP | |
|
79
|
CVE-2026-56067 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. | |
|
79
|
CVE-2026-57702 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-67324 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> | |
|
79
|
CVE-2026-16626 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Improper restriction of XML external entity reference vulnerability (unauthentic | |
|
77
|
CVE-2026-114102 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unau | |
|
75
|
CVE-2026-99030 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: skbuff | |
|
75
|
CVE-2026-119290 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Zuke is a code-first, strongly typed build automation system for Deno. Prior to | |
|
75
|
CVE-2026-54737 |
7.3 | 0.0046 | NET NO AUTH LOW CX NO UI | @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preserva | |
|
70
|
CVE-2026-52782 |
9.9 | 0.0045 | NET LOW CX NO UI | OpenProject is open-source, web-based project management software. Prior to 17.3 | |
|
70
|
CVE-2026-115889 |
9.9 | 0.0045 | NET LOW CX NO UI | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelif | |
|
69
|
CVE-2026-7813 |
9.4 | 0.0046 | NET LOW CX NO UI | Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Se | |
|
68
|
CVE-2026-55084 |
8.8 | 0.0046 | NET LOW CX NO UI | DHIS2 is a flexible information system for data capture, management, validation, | |
|
68
|
CVE-2026-32560 |
8.8 | 0.0046 | NET LOW CX NO UI | Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, | |
|
68
|
CVE-2026-42550 |
8.8 | 0.0046 | NET LOW CX NO UI | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, SimplePdo::ins | |
|
68
|
CVE-2026-112407 |
8.8 | 0.0046 | NET LOW CX NO UI | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serve | |
|
68
|
CVE-2026-113239 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Race condition in SiteIsolation in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-92206 |
8.8 | 0.0046 | NET NO AUTH LOW CX | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vu | |
|
68
|
CVE-2026-16760 |
8.8 | 0.0046 | NET NO AUTH LOW CX | In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle | |
|
68
|
CVE-2023-22648 |
8.8 | 0.0045 | NET LOW CX NO UI | A Improper Privilege Management vulnerability in SUSE Rancher causes permission | |
|
67
|
CVE-2026-7815 |
8.7 | 0.0046 | NET LOW CX NO UI | SQL injection vulnerability in pgAdmin 4 Maintenance Tool. Four user-supplied J | |
|
67
|
CVE-2026-34100 |
8.7 | 0.0046 | NET LOW CX NO UI | Guardian language-system passes the id GET parameter directly into an unsanitize | |
|
67
|
CVE-2026-34101 |
8.7 | 0.0046 | NET LOW CX NO UI | Guardian language-system passes the id GET parameter directly into an unsanitize | |
|
67
|
CVE-2026-34102 |
8.7 | 0.0046 | NET LOW CX NO UI | Guardian language-system passes the id GET parameter directly into an unsanitize | |
|
67
|
CVE-2026-34103 |
8.7 | 0.0046 | NET LOW CX NO UI | Guardian language-system passes the id GET parameter directly into an unsanitize | |
|
67
|
CVE-2026-34104 |
8.7 | 0.0046 | NET LOW CX NO UI | Guardian language-system passes the name GET parameter directly into an unsaniti | |
|
67
|
CVE-2026-34105 |
8.7 | 0.0046 | NET LOW CX NO UI | Guardian language-system passes the id GET parameter directly into an unsanitize | |
|
67
|
CVE-2026-66027 |
8.7 | 0.0046 | NET LOW CX NO UI | Suna before 0.9.102 contains a broken access control vulnerability in the messag | |
|
67
|
CVE-2026-61518 |
8.7 | 0.0046 | NET LOW CX NO UI | ISPConfig contains an authenticated SQL injection vulnerability in the Remote AP | |
|
67
|
CVE-2026-54202 |
8.5 | 0.0045 | NET LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vuln | |
|
66
|
CVE-2026-59545 |
8.1 | 0.0046 | NET NO AUTH NO UI | Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 | |
|
64
|
CVE-2026-59258 |
7.2 | 0.0046 | NET LOW CX NO UI | immich before 3.0.3 contains a broken access control vulnerability in the PUT /a | |
|
64
|
CVE-2026-69119 |
7.2 | 0.0046 | NET LOW CX NO UI | Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the servic | |
|
64
|
CVE-2026-47397 |
7.1 | 0.0046 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadat | |
|
58
|
CVE-2026-114140 |
8.8 | 0.0046 | NET LOW CX | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various oth |