Hunt List
12,917 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-44888 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to | |
|
80
|
CVE-2026-32966 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metada | |
|
80
|
CVE-2026-76408 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-76529 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
79
|
CVE-2026-44257 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManag | |
|
79
|
CVE-2026-39494 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
78
|
CVE-2026-61436 |
8.8 | 0.0039 | NET NO AUTH LOW CX NO UI | PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail web | |
|
78
|
CVE-2026-65604 |
8.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request | |
|
77
|
CVE-2026-0993 |
8.7 | 0.0039 | NET NO AUTH LOW CX NO UI | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vuln | |
|
77
|
CVE-2021-48018 |
8.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentr | |
|
75
|
CVE-2026-48774 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions | |
|
75
|
CVE-2026-98479 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: libis | |
|
75
|
CVE-2026-82942 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a re | |
|
75
|
CVE-2026-6772 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions in the Libraries component in NSS. This vulnerabil | |
|
75
|
CVE-2026-42544 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Gran | |
|
75
|
CVE-2026-51606 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 ( | |
|
75
|
CVE-2026-62351 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | TDengine is a time-series database optimized for Internet of Things devices. Pri | |
|
75
|
CVE-2026-106113 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacke | |
|
75
|
CVE-2026-118659 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Happy DOM is a JavaScript implementation of a web browser without its graphical | |
|
70
|
CVE-2026-41050 |
9.9 | 0.0039 | NET LOW CX NO UI | Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two co | |
|
69
|
CVE-2026-75851 |
9.4 | 0.0039 | NET LOW CX NO UI | ArcadeDB server (com.arcadedb:arcadedb-server) in versions 26.7.3 and earlier fa | |
|
69
|
CVE-2026-46795 |
9.3 | 0.0039 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
69
|
CVE-2026-46805 |
9.3 | 0.0039 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
69
|
CVE-2026-2342 |
9.3 | 0.0039 | NET NO AUTH LOW CX | Improper neutralization of input during web page generation ('cross-site scripti | |
|
68
|
CVE-2025-59580 |
8.8 | 0.0039 | NET LOW CX NO UI | Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodl | |
|
68
|
CVE-2026-34393 |
8.8 | 0.0039 | NET LOW CX NO UI | Weblate is a web based localization tool. In versions prior to 5.17, the user pa | |
|
68
|
CVE-2026-76291 |
8.8 | 0.0039 | NET LOW CX NO UI | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user | |
|
68
|
CVE-2026-118073 |
8.8 | 0.0039 | NET LOW CX NO UI | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | |
|
68
|
CVE-2026-73186 |
8.8 | 0.0039 | NET LOW CX NO UI | Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions. | |
|
68
|
CVE-2026-113255 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078. | |
|
68
|
CVE-2026-20586 |
8.8 | 0.0039 | NET NO AUTH LOW CX | In vdec, there is a possible out of bounds write due to a missing bounds check. | |
|
67
|
CVE-2026-6282 |
8.6 | 0.0039 | NET LOW CX NO UI | A potential improper file path validation vulnerability was reported in some Len | |
|
67
|
CVE-2026-101459 |
8.3 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone | |
|
67
|
CVE-2026-59109 |
8.7 | 0.0039 | NET NO AUTH LOW CX | SQL injection in the Zalktis accounting application via trading-partner-controll | |
|
67
|
CVE-2026-59179 |
8.3 | 0.0039 | NET NO AUTH LOW CX | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, ` | |
|
67
|
CVE-2026-101593 |
8.3 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
66
|
CVE-2026-70868 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
66
|
CVE-2026-70924 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middle | |
|
66
|
CVE-2026-71035 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
66
|
CVE-2026-71053 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle | |
|
66
|
CVE-2026-71068 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch | |
|
66
|
CVE-2026-71112 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle | |
|
66
|
CVE-2026-80353 |
8.1 | 0.0039 | NET NO AUTH NO UI | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat | |
|
65
|
CVE-2026-14251 |
7.7 | 0.0039 | NET LOW CX NO UI | A flaw was found in the OpenShift GitOps operator. The ClusterRole reconciler do | |
|
65
|
CVE-2026-72584 |
7.4 | 0.0039 | NET NO AUTH NO UI | A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15. | |
|
64
|
CVE-2026-61165 |
7.1 | 0.0039 | NET LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search Platform Services product of | |
|
64
|
CVE-2026-46336 |
7.1 | 0.0039 | NET LOW CX NO UI | Manyfold is an open source, self-hosted web application for managing a collectio | |
|
62
|
CVE-2024-56838 |
8.6 | 0.0039 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.1 | |
|
58
|
CVE-2026-15643 |
9.2 | 0.0039 | NET LOW CX | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Pro | |
|
56
|
CVE-2026-47237 |
8.0 | 0.0039 | NET LOW CX | Kubeflow Community Distribution helps users to install Kubeflow Platform in popu |