Hunt List
12,173 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-34841 |
9.8 | 0.0023 | NET NO AUTH LOW CX NO UI | Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Brun | |
|
80
|
CVE-2026-40446 |
9.8 | 0.0023 | NET NO AUTH LOW CX NO UI | Access of resource using incompatible type ('type confusion') vulnerability in S | |
|
80
|
CVE-2026-53407 |
9.8 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before | |
|
79
|
CVE-2026-42761 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-54815 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-54819 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-56073 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP ve | |
|
78
|
CVE-2026-16381 |
9.1 | 0.0023 | NET NO AUTH LOW CX NO UI | Same-origin policy bypass in the Networking: DNS component. This vulnerability w | |
|
77
|
CVE-2026-40515 |
8.7 | 0.0023 | NET NO AUTH LOW CX NO UI | OpenHarness before commit bd4df81 contains a permission bypass vulnerability tha | |
|
76
|
CVE-2026-107324 |
8.2 | 0.0023 | NET NO AUTH LOW CX NO UI | An integer overflow in BSON value-length handling in the MongoDB Go Driver can c | |
|
76
|
CVE-2026-103602 |
8.2 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper certificate validation in PkixNameConstraintValidator in Legion of the | |
|
75
|
CVE-2023-42346 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external h | |
|
75
|
CVE-2026-14114 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior | |
|
75
|
CVE-2026-52699 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 | |
|
75
|
CVE-2026-42377 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exp | |
|
74
|
CVE-2026-118645 |
7.0 | 0.0023 | NET NO AUTH LOW CX NO UI | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filt | |
|
69
|
CVE-2026-15587 |
9.4 | 0.0023 | NET LOW CX NO UI | Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior t | |
|
68
|
CVE-2026-0151 |
8.8 | 0.0023 | NET LOW CX NO UI | In IntfGraphCreate of intfgraph.c, there is a possible out of bounds write due t | |
|
68
|
CVE-2026-0154 |
8.8 | 0.0023 | NET LOW CX NO UI | In Modem, there is a possible way to trigger a modem crash during a SIP REFER re | |
|
68
|
CVE-2026-0160 |
8.8 | 0.0023 | NET LOW CX NO UI | In TextRtpPayloadDecoderNode::DecodeT140 of TextRtpPayloadDecoderNode.cpp, there | |
|
68
|
CVE-2026-0161 |
8.8 | 0.0023 | NET LOW CX NO UI | In numberOfReportBlocks of RtpSession.cpp, there is a possible out of bounds wri | |
|
68
|
CVE-2026-0162 |
8.8 | 0.0023 | NET LOW CX NO UI | In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption du | |
|
68
|
CVE-2026-0164 |
8.8 | 0.0023 | NET LOW CX NO UI | In Modem, there is a possible out of bounds write due to a missing bounds check. | |
|
68
|
CVE-2026-57786 |
8.8 | 0.0023 | NET NO AUTH LOW CX | Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core wor | |
|
68
|
CVE-2026-55237 |
8.8 | 0.0023 | NET NO AUTH LOW CX | AutoGPT is a workflow automation platform for creating, deploying, and managing | |
|
68
|
CVE-2026-103407 |
8.8 | 0.0023 | NET LOW CX NO UI | An Improper Limitation of a Pathname to a Restricted Directory vulnerability in | |
|
66
|
CVE-2026-40113 |
8.1 | 0.0023 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs | |
|
66
|
CVE-2026-43993 |
8.2 | 0.0023 | NET NO AUTH LOW CX | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-securit | |
|
65
|
CVE-2026-59950 |
7.6 | 0.0023 | NET NO AUTH LOW CX | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model | |
|
64
|
CVE-2026-0234 |
7.2 | 0.0023 | NET NO AUTH NO UI | An improper verification of cryptographic signature vulnerability exists in Cort | |
|
64
|
CVE-2026-8063 |
7.1 | 0.0023 | NET LOW CX NO UI | An authenticated user can crash mongod when running $rankFusion or $scoreFusion | |
|
64
|
CVE-2026-39449 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 v | |
|
64
|
CVE-2026-39463 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions | |
|
64
|
CVE-2026-48871 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions. | |
|
64
|
CVE-2026-49055 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload | |
|
64
|
CVE-2026-22339 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions. | |
|
64
|
CVE-2026-41557 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions. | |
|
64
|
CVE-2026-42385 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 vers | |
|
64
|
CVE-2026-57317 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1. | |
|
64
|
CVE-2026-101851 |
7.1 | 0.0023 | NET LOW CX NO UI | Vulnerability in the Installed Base product of Oracle E-Business Suite (componen | |
|
62
|
CVE-2026-117466 |
8.6 | 0.0023 | NET LOW CX NO UI | In affected versions of Octopus Server, a user holding the System Manager role c | |
|
62
|
CVE-2026-106077 |
8.3 | 0.0023 | NET LOW CX NO UI | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administ | |
|
60
|
CVE-2026-42646 |
7.6 | 0.0023 | NET LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
57
|
CVE-2026-8525 |
8.3 | 0.0023 | NET NO AUTH | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 al | |
|
57
|
CVE-2026-12016 |
8.3 | 0.0023 | NET NO AUTH | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.11 | |
|
57
|
CVE-2026-12023 |
8.3 | 0.0023 | NET NO AUTH | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a | |
|
57
|
CVE-2026-12028 |
8.3 | 0.0023 | NET NO AUTH | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowe | |
|
55
|
CVE-2026-33044 |
7.3 | 0.0023 | NET LOW CX | Home Assistant is open source home automation software that puts local control a | |
|
55
|
CVE-2026-101818 |
7.7 | 0.0023 | NET NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
54
|
CVE-2026-54302 |
7.0 | 0.0023 | NET LOW CX | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, a |