Hunt List
13,139 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-76527 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-53055 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: crypto: his | |
|
80
|
CVE-2026-14241 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidenc | |
|
80
|
CVE-2026-58422 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Improper authorization on OAuth sign-in callback silently re-enables administrat | |
|
80
|
CVE-2026-64439 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: crypto: krb | |
|
79
|
CVE-2026-77644 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | A critical bypass access control vulnerability has been reported in PTC Windchil | |
|
78
|
CVE-2026-33807 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegist | |
|
78
|
CVE-2026-118264 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy midd | |
|
78
|
CVE-2026-116818 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vuln | |
|
77
|
CVE-2025-11573 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a | |
|
77
|
CVE-2026-75840 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the Graa | |
|
77
|
CVE-2026-63566 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Memory allocation with excessive size value in the DTLS handshake reassembly (Dt | |
|
77
|
CVE-2026-114106 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerabili | |
|
77
|
CVE-2026-7790 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te | |
|
75
|
CVE-2026-8361 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processin | |
|
75
|
CVE-2026-89481 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: f | |
|
75
|
CVE-2026-41564 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state aft | |
|
75
|
CVE-2026-28906 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | This issue was addressed through improved state management. This issue is fixed | |
|
75
|
CVE-2026-4942 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specificall | |
|
75
|
CVE-2026-105626 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in | |
|
70
|
CVE-2026-46716 |
9.9 | 0.0043 | NET LOW CX NO UI | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitorin | |
|
68
|
CVE-2026-71055 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
68
|
CVE-2026-71058 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: | |
|
68
|
CVE-2026-71067 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch | |
|
68
|
CVE-2026-71150 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
68
|
CVE-2026-14980 |
8.8 | 0.0043 | NET NO AUTH LOW CX | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerab | |
|
68
|
CVE-2026-72558 |
8.8 | 0.0043 | NET LOW CX NO UI | An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticat | |
|
68
|
CVE-2026-72562 |
8.8 | 0.0043 | NET LOW CX NO UI | An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through versio | |
|
67
|
CVE-2026-46746 |
8.7 | 0.0043 | NET LOW CX NO UI | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update | |
|
67
|
CVE-2026-9272 |
8.7 | 0.0043 | NET LOW CX NO UI | In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exi | |
|
66
|
CVE-2026-74907 |
8.2 | 0.0043 | NET NO AUTH NO UI | Grav before 2.0.15 contains a path traversal vulnerability in the static asset s | |
|
66
|
CVE-2026-43910 |
8.2 | 0.0043 | NET NO AUTH LOW CX | Appium Java Client is the Java language binding for writing Appium tests that co | |
|
66
|
CVE-2025-62053 |
8.1 | 0.0043 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
66
|
CVE-2025-62055 |
8.1 | 0.0043 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
66
|
CVE-2026-59818 |
8.1 | 0.0043 | NET LOW CX NO UI | etcd is a distributed key-value store for the data of a distributed system. Prio | |
|
65
|
CVE-2026-67527 |
7.6 | 0.0043 | NET LOW CX NO UI | OpenProject is open-source, web-based project management software. Prior to 17.6 | |
|
65
|
CVE-2026-49276 |
7.4 | 0.0043 | NET NO AUTH LOW CX | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kir | |
|
65
|
CVE-2026-115908 |
7.4 | 0.0043 | NET NO AUTH NO UI | zip is a zip library for Rust that supports reading and writing simple ZIP files | |
|
65
|
CVE-2026-99077 |
7.4 | 0.0043 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: | |
|
65
|
CVE-2026-48766 |
7.6 | 0.0043 | NET LOW CX NO UI | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privileg | |
|
65
|
CVE-2026-48767 |
7.6 | 0.0043 | NET LOW CX NO UI | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privileg | |
|
64
|
CVE-2026-63201 |
7.1 | 0.0043 | NET LOW CX NO UI | Netopeer2 is a server for implementing network configuration management based on | |
|
64
|
CVE-2026-58411 |
7.0 | 0.0043 | NET NO AUTH LOW CX | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cr | |
|
59
|
CVE-2026-91433 |
7.2 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (c | |
|
59
|
CVE-2026-109381 |
7.2 | 0.0043 | NET LOW CX NO UI | The Mage Eventpress plugin for WordPress is vulnerable to privilege escalation i | |
|
59
|
CVE-2026-101786 |
7.2 | 0.0043 | NET LOW CX NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
57
|
CVE-2026-55839 |
8.7 | 0.0043 | NET LOW CX | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, | |
|
57
|
CVE-2026-44175 |
8.5 | 0.0043 | NET LOW CX | Kirby is an open-source content management system. In versions prior to 4.9.1 an | |
|
56
|
CVE-2026-15723 |
8.2 | 0.0043 | NET NO UI | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 | |
|
55
|
CVE-2026-58290 |
7.5 | 0.0043 | NET NO AUTH | Access of resource using incompatible type ('type confusion') in Microsoft Edge |