Hunt List
13,057 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-10577 |
10.0 | 0.0041 | NET NO AUTH LOW CX NO UI | A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected | |
|
80
|
CVE-2026-76607 |
10.0 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabri | |
|
80
|
CVE-2026-77995 |
10.0 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAu | |
|
79
|
CVE-2026-55666 |
9.3 | 0.0041 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
79
|
CVE-2026-25775 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | A vulnerability in SenseLive X3050’s remote management service allows firmware r | |
|
78
|
CVE-2026-27851 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | When safe filter is used with variable expansion, all following pipelines on the | |
|
78
|
CVE-2026-13449 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable | |
|
78
|
CVE-2026-13603 |
9.0 | 0.0041 | NET NO AUTH LOW CX NO UI | The payment integration pretix-oppwa provides support for the payment providers | |
|
78
|
CVE-2026-69078 |
8.8 | 0.0041 | NET NO AUTH LOW CX NO UI | CTI-Transmute is affected by a server-side request forgery vulnerability in the | |
|
78
|
CVE-2026-46809 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
78
|
CVE-2026-46930 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries pr | |
|
78
|
CVE-2026-46949 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Busi | |
|
77
|
CVE-2024-58276 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keywor | |
|
77
|
CVE-2026-52877 |
8.3 | 0.0041 | NET NO AUTH LOW CX NO UI | Streambert is a cross-platform Electron Desktop App to stream and download video | |
|
77
|
CVE-2026-60030 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - themexpert.com - Broken Access Control for media management i | |
|
77
|
CVE-2026-47662 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Pathling is a set of tools that make it easier to use FHIR and clinical terminol | |
|
77
|
CVE-2026-47663 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Pathling is a set of tools that make it easier to use FHIR and clinical terminol | |
|
77
|
CVE-2026-73160 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_m | |
|
77
|
CVE-2026-76596 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doem | |
|
77
|
CVE-2026-76599 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Unauthenticated database table list and table- | |
|
77
|
CVE-2026-67425 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior | |
|
77
|
CVE-2026-73247 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, K | |
|
77
|
CVE-2026-33445 |
8.7 | 0.0040 | NET NO AUTH LOW CX NO UI | CVE-2026-33445 is a memory management vulnerability in Secure Access servers pri | |
|
77
|
CVE-2026-114063 |
8.7 | 0.0040 | NET NO AUTH LOW CX NO UI | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vul | |
|
77
|
CVE-2026-118660 |
8.6 | 0.0040 | NET NO AUTH LOW CX NO UI | Happy DOM is a JavaScript implementation of a web browser without its graphical | |
|
75
|
CVE-2026-28974 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | This issue was addressed with improved checks to prevent unauthorized actions. T | |
|
70
|
CVE-2026-62853 |
9.9 | 0.0041 | NET LOW CX NO UI | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest | |
|
69
|
CVE-2026-115375 |
9.4 | 0.0040 | NET LOW CX NO UI | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulner | |
|
69
|
CVE-2026-115377 |
9.4 | 0.0040 | NET LOW CX NO UI | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbit | |
|
68
|
CVE-2026-4525 |
8.8 | 0.0041 | NET LOW CX NO UI | If a Vault auth mount is configured to pass through the "Authorization" header, | |
|
68
|
CVE-2026-16372 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Privilege escalation in the DOM: Content Processes component. This vulnerability | |
|
68
|
CVE-2026-112995 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113009 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113141 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113146 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 all | |
|
68
|
CVE-2026-113220 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.80 | |
|
67
|
CVE-2026-34430 |
8.6 | 0.0041 | NET NO AUTH LOW CX | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vul | |
|
67
|
CVE-2026-75829 |
8.6 | 0.0041 | NET LOW CX NO UI | grav-plugin-api versions before 1.0.15 fail to validate Twig content in the tran | |
|
66
|
CVE-2026-12327 |
8.1 | 0.0041 | NET NO AUTH NO UI | Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefo | |
|
66
|
CVE-2026-35289 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle Peop | |
|
66
|
CVE-2026-101390 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-101411 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-114724 |
8.1 | 0.0041 | NET NO AUTH NO UI | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object inject | |
|
65
|
CVE-2026-92203 |
7.7 | 0.0041 | NET LOW CX NO UI | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forger | |
|
64
|
CVE-2026-18690 |
7.2 | 0.0041 | NET LOW CX NO UI | An issue in MongoDB Server could allow an authenticated user with a limited data | |
|
62
|
CVE-2026-61332 |
8.7 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
62
|
CVE-2026-62607 |
8.7 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (co | |
|
62
|
CVE-2026-71050 |
8.7 | 0.0041 | NET LOW CX NO UI | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply | |
|
57
|
CVE-2026-65986 |
8.5 | 0.0040 | NET LOW CX | CVAT is an open source interactive video and image annotation tool for computer | |
|
57
|
CVE-2026-85886 |
8.5 | 0.0040 | NET NO UI | Heap-based buffer overflow in SQL Server allows an authorized attacker to execut |