Hunt List
13,097 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
68
|
CVE-2026-56086 |
8.8 | 0.0042 | NET LOW CX NO UI | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release ver | |
|
68
|
CVE-2026-57386 |
8.8 | 0.0042 | NET LOW CX NO UI | Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allo | |
|
68
|
CVE-2026-57410 |
8.8 | 0.0042 | NET LOW CX NO UI | Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mai | |
|
68
|
CVE-2026-47870 |
8.8 | 0.0042 | NET LOW CX NO UI | VMware Avi Load Balancer contains a privilege escalation vulnerability. A malici | |
|
68
|
CVE-2026-49499 |
8.8 | 0.0042 | NET LOW CX NO UI | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generat | |
|
68
|
CVE-2026-59541 |
8.8 | 0.0042 | NET LOW CX NO UI | Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions. | |
|
68
|
CVE-2026-17568 |
8.8 | 0.0042 | NET LOW CX NO UI | Improper access control in the role membership management endpoint in Devolution | |
|
68
|
CVE-2026-17070 |
8.8 | 0.0042 | NET LOW CX NO UI | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Accessing | |
|
68
|
CVE-2026-18650 |
8.8 | 0.0042 | NET LOW CX NO UI | Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows Privilege | |
|
68
|
CVE-2026-17626 |
8.8 | 0.0042 | NET LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated atta | |
|
68
|
CVE-2026-28111 |
8.8 | 0.0042 | NET LOW CX NO UI | Contributor Privilege Escalation in Forminator <= 1.56.0 versions. | |
|
68
|
CVE-2026-72534 |
8.8 | 0.0042 | NET LOW CX NO UI | A privilege escalation vulnerability in Authentik Security authentik through 202 | |
|
68
|
CVE-2026-72561 |
8.8 | 0.0042 | NET LOW CX NO UI | A broken access control vulnerability in Peppermint Lab Peppermint through commi | |
|
68
|
CVE-2026-28161 |
8.8 | 0.0042 | NET LOW CX NO UI | Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. | |
|
68
|
CVE-2026-28191 |
8.8 | 0.0042 | NET LOW CX NO UI | Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privile | |
|
68
|
CVE-2026-76351 |
8.8 | 0.0042 | NET LOW CX NO UI | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splu | |
|
68
|
CVE-2026-113040 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113041 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113042 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113044 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
|
68
|
CVE-2026-113049 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
68
|
CVE-2026-113052 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113079 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113100 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113104 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113105 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113106 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
68
|
CVE-2026-113108 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113109 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113110 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113111 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113113 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113117 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.807 | |
|
68
|
CVE-2026-113119 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113134 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113149 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113150 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113153 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113154 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113155 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113164 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113166 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in History in Google Chrome on on Android prior to 156.0.8078. | |
|
68
|
CVE-2026-113173 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in UI in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-113207 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-113226 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113229 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113232 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113233 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113234 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113292 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Omnibox in Google Chrome on on Android prior to 156 |