Hunt List
13,195 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-47396 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's ca | |
|
80
|
CVE-2026-41409 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incom | |
|
79
|
CVE-2026-56081 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Cap-go before 12.128.2 contains an authentication logic flaw that lets an attack | |
|
78
|
CVE-2026-0647 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | An improper authentication security issue exists within the 1794-AENTR adapter's | |
|
78
|
CVE-2026-72798 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to properly filter related-database content i | |
|
78
|
CVE-2026-46777 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
78
|
CVE-2015-20120 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL in | |
|
78
|
CVE-2026-86411 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP co | |
|
77
|
CVE-2026-65759 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Eas | |
|
77
|
CVE-2026-59874 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar | |
|
77
|
CVE-2026-74034 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgra | |
|
75
|
CVE-2026-60223 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
75
|
CVE-2026-70700 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (compone | |
|
75
|
CVE-2026-71113 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp | |
|
75
|
CVE-2026-71153 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73890 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73902 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73915 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73927 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73934 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73935 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73936 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-95127 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of servic | |
|
75
|
CVE-2026-111418 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A server-side request forgery (SSRF) vulnerability exists in the Foxit official | |
|
75
|
CVE-2026-44705 |
7.7 | 0.0043 | NET NO AUTH LOW CX NO UI | tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the t | |
|
75
|
CVE-2026-10735 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimoni | |
|
75
|
CVE-2026-40452 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. | |
|
75
|
CVE-2026-107037 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Insecure permissions in the NotificationHelper component of NoNonsense Notes ver | |
|
75
|
CVE-2026-107047 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized at | |
|
70
|
CVE-2026-25446 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. | |
|
70
|
CVE-2026-40746 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. | |
|
70
|
CVE-2026-40747 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. | |
|
70
|
CVE-2026-40748 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. | |
|
70
|
CVE-2026-40749 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. | |
|
69
|
CVE-2026-39878 |
9.3 | 0.0043 | NET NO AUTH LOW CX | Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting v | |
|
68
|
CVE-2026-5279 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remot | |
|
68
|
CVE-2026-43490 |
8.8 | 0.0043 | NET LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vali | |
|
68
|
CVE-2026-113254 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113268 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.4 | |
|
68
|
CVE-2026-101635 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101653 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101654 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
67
|
CVE-2026-12593 |
8.7 | 0.0043 | NET LOW CX NO UI | The implementation of an internal and undocumented Dashboard API endpoint (POST | |
|
67
|
CVE-2026-73484 |
8.6 | 0.0043 | NET LOW CX NO UI | Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValida | |
|
64
|
CVE-2026-66749 |
7.1 | 0.0044 | NET LOW CX NO UI | Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that al | |
|
64
|
CVE-2026-63550 |
7.1 | 0.0044 | NET LOW CX NO UI | The MMS BER decoder contains a boundary-handling flaw in the processing of cert | |
|
64
|
CVE-2026-75531 |
7.0 | 0.0044 | NET NO AUTH LOW CX | Pandora contains a stored cross-site scripting (XSS) vulnerability in the render | |
|
64
|
CVE-2026-57951 |
7.1 | 0.0043 | NET LOW CX NO UI | Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload | |
|
60
|
CVE-2026-73264 |
7.6 | 0.0043 | NET LOW CX NO UI | Prowler is a cloud security platform. Prior to 5.33.1, an authenticated user wit | |
|
57
|
CVE-2024-22031 |
8.5 | 0.0043 | NET NO UI | A vulnerability has been identified within Rancher where a user with the ability |