Hunt List
12,862 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
77
|
CVE-2026-5052 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | Vault’s PKI engine’s ACME validation did not reject local targets when issuing h | |
|
77
|
CVE-2026-111419 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | A sensitive information exposure vulnerability exists on the Foxit official webs | |
|
77
|
CVE-2026-55889 |
8.3 | 0.0034 | NET NO AUTH LOW CX NO UI | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, mal | |
|
77
|
CVE-2026-114405 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | Improper validation of array index vulnerability in Velneo vServer. This issue a | |
|
77
|
CVE-2026-115349 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of ser | |
|
77
|
CVE-2026-83407 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
76
|
CVE-2026-46720 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The | |
|
76
|
CVE-2026-119682 |
7.9 | 0.0034 | NET NO AUTH LOW CX NO UI | An improper access control vulnerability exists in the multi-factor authenticati | |
|
75
|
CVE-2026-33614 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection | |
|
75
|
CVE-2026-33616 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | An unauthenticated remote attacker can exploit an unauthenticated blind SQL Inje | |
|
75
|
CVE-2026-111417 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | A broken access control vulnerability exists in the Foxit official website’s HTM | |
|
75
|
CVE-2026-42365 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | A guessable session cookie vulnerability exists in the Web Interface functionali | |
|
75
|
CVE-2026-65370 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could | |
|
70
|
CVE-2026-113617 |
9.9 | 0.0034 | NET LOW CX NO UI | The Automated Import Products to Cart WordPress plugin before 1.0.4 does not san | |
|
69
|
CVE-2026-46899 |
9.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
68
|
CVE-2026-15129 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remot | |
|
68
|
CVE-2026-15904 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowe | |
|
68
|
CVE-2026-16423 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote a | |
|
68
|
CVE-2026-16807 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a | |
|
68
|
CVE-2026-17752 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Views in Google Chrome on Mac prior to 151.0.7922.72 allowed a | |
|
68
|
CVE-2026-17784 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Audio in Google Chrome on Mac prior to 151.0.7922.72 allowed a | |
|
68
|
CVE-2026-17884 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Object lifecycle issue in WebRTC in Google Chrome prior to 151.0.7922.72 allowed | |
|
68
|
CVE-2026-17886 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a r | |
|
68
|
CVE-2026-17894 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Views in Google Chrome on Linux prior to 151.0.7922.72 allowed | |
|
68
|
CVE-2026-17967 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 | |
|
68
|
CVE-2026-19144 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote | |
|
68
|
CVE-2026-19169 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome | |
|
68
|
CVE-2026-7902 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowe | |
|
68
|
CVE-2026-39532 |
8.8 | 0.0034 | NET LOW CX NO UI | Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 v | |
|
68
|
CVE-2026-86398 |
8.8 | 0.0034 | NET LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
68
|
CVE-2026-103401 |
8.8 | 0.0034 | NET LOW CX NO UI | An Improper Link Resolution Before File Access ('Link Following') vulnerability | |
|
67
|
CVE-2026-47419 |
8.3 | 0.0034 | NET LOW CX NO UI | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams sys | |
|
67
|
CVE-2026-8339 |
8.7 | 0.0034 | NET LOW CX NO UI | A SQL injection vulnerability exists in the Coverity Connect SOAP API for versio | |
|
67
|
CVE-2026-41936 |
8.6 | 0.0034 | NET LOW CX NO UI | Vvveb before version 1.0.8.2 contains an XML external entity (XXE) injection vul | |
|
67
|
CVE-2026-55789 |
8.5 | 0.0034 | NET LOW CX NO UI | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior | |
|
66
|
CVE-2026-14090 |
8.1 | 0.0034 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in CameraCapture in Google Chrome on | |
|
66
|
CVE-2026-47409 |
8.1 | 0.0034 | NET LOW CX NO UI | PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams sys | |
|
66
|
CVE-2026-46939 |
8.1 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle Configure to Order product of Oracle E-Business Suit | |
|
65
|
CVE-2026-101736 |
7.4 | 0.0034 | NET NO AUTH NO UI | Vulnerability in the Primavera Unifier product of Oracle Construction and Engine | |
|
64
|
CVE-2026-40524 |
7.2 | 0.0034 | NET LOW CX NO UI | FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_ | |
|
64
|
CVE-2026-33533 |
7.1 | 0.0034 | NET NO AUTH LOW CX | Glances is an open-source system cross-platform monitoring tool. Prior to versio | |
|
64
|
CVE-2026-96642 |
7.1 | 0.0034 | NET NO AUTH LOW CX | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in sr | |
|
64
|
CVE-2026-110083 |
7.1 | 0.0034 | NET LOW CX NO UI | Adobe Experience Manager is affected by an Improper Neutralization of Special El | |
|
61
|
CVE-2026-116827 |
8.2 | 0.0034 | NET LOW CX NO UI | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the | |
|
55
|
CVE-2026-42790 |
7.6 | 0.0034 | NET NO AUTH | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_c | |
|
55
|
CVE-2026-101847 |
7.5 | 0.0034 | NET NO UI | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite | |
|
55
|
CVE-2026-83370 |
7.5 | 0.0034 | NET NO UI | Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auc | |
|
55
|
CVE-2026-87363 |
7.5 | 0.0034 | NET NO UI | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen | |
|
55
|
CVE-2026-98173 |
7.5 | 0.0034 | NET NO AUTH | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
50
|
CVE-2026-101705 |
7.7 | 0.0034 | NET NO UI | Vulnerability in the Oracle Common Applications product of Oracle E-Business Sui |