Hunt List
12,831 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-74253 |
10.0 | 0.0032 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified refl | |
|
79
|
CVE-2026-8076 |
9.3 | 0.0032 | NET NO AUTH LOW CX NO UI | Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, | |
|
79
|
CVE-2026-112860 |
9.3 | 0.0032 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-115964 |
9.3 | 0.0032 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-39732 |
9.3 | 0.0032 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions. | |
|
78
|
CVE-2026-114611 |
9.1 | 0.0032 | NET NO AUTH LOW CX NO UI | OCO-Server is a self-hosted endpoint management application for computer invento | |
|
78
|
CVE-2026-54367 |
8.8 | 0.0032 | NET NO AUTH LOW CX NO UI | CentreStack before 17.2 contains an authentication bypass vulnerability that all | |
|
78
|
CVE-2026-41248 |
9.1 | 0.0032 | NET NO AUTH LOW CX NO UI | Clerk JavaScript is the official JavaScript repository for Clerk authentication. | |
|
78
|
CVE-2026-95695 |
9.1 | 0.0032 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could all | |
|
78
|
CVE-2023-49440 |
8.8 | 0.0032 | NET LOW CX NO UI | 1 PoC | AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." |
|
77
|
CVE-2026-33790 |
8.7 | 0.0032 | NET NO AUTH LOW CX NO UI | An Improper Check for Unusual or Exceptional Conditions vulnerability in the flo | |
|
77
|
CVE-2026-22925 |
8.7 | 0.0032 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). Th | |
|
77
|
CVE-2026-40060 |
8.7 | 0.0032 | NET NO AUTH LOW CX NO UI | When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual ser | |
|
77
|
CVE-2026-40067 |
8.7 | 0.0032 | NET NO AUTH LOW CX NO UI | When a BIG-IP APM access policy is configured on a virtual server, undisclosed t | |
|
77
|
CVE-2026-40618 |
8.7 | 0.0032 | NET NO AUTH LOW CX NO UI | When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition | |
|
77
|
CVE-2026-40629 |
8.7 | 0.0032 | NET NO AUTH LOW CX NO UI | When SSL profiles are configured on a virtual server, undisclosed traffic can ca | |
|
77
|
CVE-2026-91343 |
8.6 | 0.0032 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl | |
|
76
|
CVE-2026-50637 |
8.2 | 0.0032 | NET NO AUTH LOW CX NO UI | Metrics::Any::Adapter::Statsd versions before 0.04 for Perl does not protect aga | |
|
75
|
CVE-2026-6773 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Denial-of-service due to integer overflow in the Graphics: WebGPU component. Thi | |
|
75
|
CVE-2026-34297 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business | |
|
75
|
CVE-2026-91349 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl | |
|
75
|
CVE-2026-58085 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) | |
|
75
|
CVE-2026-87315 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
70
|
CVE-2026-22619 |
9.9 | 0.0032 | NET LOW CX NO UI | Eaton Intelligent Power Protector (IPP) is affected by insecure library loading | |
|
70
|
CVE-2026-116241 |
9.9 | 0.0032 | NET LOW CX NO UI | pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy | |
|
69
|
CVE-2026-42087 |
9.6 | 0.0032 | NET LOW CX NO UI | OpenC3 COSMOS provides the functionality needed to send commands to and receive | |
|
69
|
CVE-2026-48745 |
9.3 | 0.0032 | NET NO AUTH LOW CX | Traccar Client is a GPS tracking mobile app for sending location updates to priv | |
|
68
|
CVE-2026-6315 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.10 | |
|
67
|
CVE-2026-35271 |
8.7 | 0.0032 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle Peop | |
|
67
|
CVE-2026-114387 |
8.7 | 0.0032 | NET LOW CX NO UI | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability t | |
|
67
|
CVE-2026-8079 |
8.7 | 0.0032 | NET LOW CX NO UI | In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists | |
|
67
|
CVE-2026-56690 |
8.5 | 0.0032 | NET LOW CX NO UI | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutral | |
|
66
|
CVE-2026-46806 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-45749 |
8.1 | 0.0032 | NET LOW CX NO UI | Termix is a web-based server management platform with SSH terminal, tunneling, a | |
|
66
|
CVE-2026-113874 |
8.1 | 0.0032 | NET LOW CX NO UI | SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identi | |
|
64
|
CVE-2026-40623 |
7.2 | 0.0032 | NET LOW CX NO UI | A vulnerability in SenseLive X3050's web management interface allows critical sy | |
|
64
|
CVE-2026-40831 |
7.1 | 0.0032 | NET LOW CX NO UI | An low privileged remote attacker can exploit an unauthenticated SQL Injection v | |
|
64
|
CVE-2026-65896 |
7.1 | 0.0032 | NET LOW CX NO UI | Grav API Plugin (Composer package getgrav/grav-plugin-api) before 1.0.10 fails t | |
|
64
|
CVE-2026-70448 |
7.1 | 0.0032 | NET LOW CX NO UI | Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to p | |
|
62
|
CVE-2026-10748 |
8.6 | 0.0032 | NET LOW CX NO UI | An authenticated user with the nx-licensing-create privilege can upload a specia | |
|
58
|
CVE-2026-34568 |
9.0 | 0.0032 | NET LOW CX | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, mo | |
|
57
|
CVE-2026-13829 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in Settings in Google Chrome on Windo | |
|
57
|
CVE-2026-14428 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in Dawn in Google Chrome on Android p | |
|
57
|
CVE-2026-15122 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in Codecs in Google Chrome on Windows | |
|
57
|
CVE-2026-15769 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in Linux Toolkit Theming in Google Ch | |
|
57
|
CVE-2026-17660 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in Network in Google Chrome prior to | |
|
57
|
CVE-2026-17663 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in GPU in Google Chrome on Android pr | |
|
57
|
CVE-2026-19177 |
8.3 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0 | |
|
57
|
CVE-2026-76044 |
8.3 | 0.0032 | NET NO AUTH | Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote | |
|
55
|
CVE-2026-17930 |
7.5 | 0.0032 | NET NO AUTH | Insufficient validation of untrusted input in Extensions in Google Chrome prior |