Hunt List
12,779 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-6768 |
9.8 | 0.0029 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Networking: Cookies component. This vulnerability was f | |
|
80
|
CVE-2026-16387 |
9.8 | 0.0028 | NET NO AUTH LOW CX NO UI | Site isolation issue in the Networking component. This vulnerability was fixed i | |
|
80
|
CVE-2026-59562 |
9.8 | 0.0028 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Apache IoTDB. T | |
|
79
|
CVE-2026-93903 |
9.4 | 0.0028 | NET LOW CX NO UI | 1 PoC | LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect UR |
|
79
|
CVE-2026-39441 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 | |
|
79
|
CVE-2026-39512 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions. | |
|
79
|
CVE-2026-39519 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. | |
|
79
|
CVE-2026-40771 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. | |
|
79
|
CVE-2026-40798 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. | |
|
79
|
CVE-2026-42381 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 version | |
|
79
|
CVE-2026-42386 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 ve | |
|
79
|
CVE-2026-42639 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. | |
|
79
|
CVE-2026-42665 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. | |
|
79
|
CVE-2026-48886 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions. | |
|
79
|
CVE-2026-22332 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions. | |
|
79
|
CVE-2026-49084 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions. | |
|
79
|
CVE-2026-54187 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions. | |
|
79
|
CVE-2026-54811 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP eMember < v10.9.4 versions. | |
|
79
|
CVE-2026-54812 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
77
|
CVE-2020-37286 |
8.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability cause | |
|
77
|
CVE-2021-48020 |
8.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability cause | |
|
75
|
CVE-2026-91664 |
7.5 | 0.0029 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
75
|
CVE-2026-40461 |
7.5 | 0.0029 | NET NO AUTH LOW CX NO UI | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modi | |
|
75
|
CVE-2026-32665 |
7.5 | 0.0029 | NET NO AUTH LOW CX NO UI | In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-ove | |
|
75
|
CVE-2026-28965 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | A privacy issue was addressed with improved checks. This issue is fixed in iOS 2 | |
|
74
|
CVE-2026-114637 |
7.0 | 0.0028 | NET NO AUTH LOW CX NO UI | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerabili | |
|
69
|
CVE-2026-6919 |
9.6 | 0.0029 | NET NO AUTH LOW CX | Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a re | |
|
68
|
CVE-2026-119128 |
9.1 | 0.0029 | NET NO AUTH NO UI | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in t | |
|
68
|
CVE-2026-52705 |
9.0 | 0.0029 | NET NO AUTH NO UI | Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= | |
|
68
|
CVE-2026-6358 |
8.8 | 0.0029 | NET NO AUTH LOW CX | Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed | |
|
68
|
CVE-2026-0132 |
8.8 | 0.0029 | NET LOW CX NO UI | In Modem, there is a possible out of bounds write due to a heap buffer overflow. | |
|
68
|
CVE-2026-0149 |
8.8 | 0.0029 | NET LOW CX NO UI | In RtpSession::rtpSendRtcpPacket, there is a possible OOB write due to a heap bu | |
|
68
|
CVE-2026-45832 |
8.8 | 0.0028 | NET LOW CX NO UI | All V1 collection-level endpoints in ChromaDB's Python project pass None for the | |
|
67
|
CVE-2026-44418 |
8.7 | 0.0029 | NET LOW CX NO UI | EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the Val | |
|
67
|
CVE-2026-119129 |
8.6 | 0.0028 | NET NO AUTH LOW CX | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authoriz | |
|
65
|
CVE-2026-7830 |
7.4 | 0.0029 | NET NO AUTH NO UI | UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authent | |
|
65
|
CVE-2026-54821 |
7.4 | 0.0028 | NET LOW CX NO UI | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.3.1 versions. | |
|
64
|
CVE-2026-17183 |
7.1 | 0.0029 | NET LOW CX NO UI | An authenticated user with permission to create or edit alert rules can bypass d | |
|
64
|
CVE-2026-109943 |
7.1 | 0.0029 | NET NO AUTH LOW CX | FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update | |
|
64
|
CVE-2026-109944 |
7.1 | 0.0029 | NET NO AUTH LOW CX | FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardRelea | |
|
57
|
CVE-2026-102790 |
8.6 | 0.0028 | NET LOW CX | Joomla Extension - icagenda.com - Stored XSS via url-type event Custom Field in | |
|
57
|
CVE-2026-117493 |
8.3 | 0.0028 | NET LOW CX | Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widg | |
|
57
|
CVE-2026-117494 |
8.3 | 0.0028 | NET LOW CX | Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api | |
|
55
|
CVE-2026-101796 |
7.5 | 0.0029 | NET NO AUTH | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
55
|
CVE-2026-111739 |
7.5 | 0.0029 | NET NO UI | The Two Factor Authentication WordPress plugin before 1.17.0, All-In-One Securit | |
|
55
|
CVE-2026-55409 |
7.6 | 0.0028 | NET LOW CX | Filament is a collection of full-stack components for accelerated Laravel develo | |
|
55
|
CVE-2026-18360 |
7.6 | 0.0028 | NET LOW CX | The IRIS web application in version 2.4.26 and possibly others is vulnerable to | |
|
55
|
CVE-2026-72594 |
7.6 | 0.0028 | NET LOW CX | A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v | |
|
54
|
CVE-2026-65494 |
7.1 | 0.0029 | NET NO UI | Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions. | |
|
54
|
CVE-2026-73345 |
7.1 | 0.0029 | NET NO UI | Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions. |