Hunt List
12,825 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-16882 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-48449 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi | |
|
80
|
CVE-2026-58231 |
10.0 | 0.0086 | NET NO AUTH LOW CX NO UI | SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authent | |
|
79
|
CVE-2026-75827 |
9.3 | 0.0086 | NET NO AUTH LOW CX NO UI | Grav before 2.0.15 contains an arbitrary file write vulnerability in the Bluepri | |
|
79
|
CVE-2026-71878 |
9.2 | 0.0086 | NET NO AUTH LOW CX NO UI | Missing authentication in initial setup functionality left exposed after initial | |
|
78
|
CVE-2026-71879 |
9.1 | 0.0086 | NET NO AUTH LOW CX NO UI | Missing authentication in initial setup functionality left exposed until first r | |
|
78
|
CVE-2026-58166 |
8.8 | 0.0085 | NET NO AUTH LOW CX NO UI | OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversa | |
|
77
|
CVE-2026-64641 |
8.2 | 0.0086 | NET NO AUTH LOW CX NO UI | Next.js is a React framework for building full-stack web applications. In versio | |
|
75
|
CVE-2026-46726 |
7.5 | 0.0086 | NET NO AUTH LOW CX NO UI | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized | |
|
75
|
CVE-2026-66143 |
7.5 | 0.0085 | NET NO AUTH LOW CX NO UI | It is possible to bypass the maximum number of normalized policy alternatives th | |
|
68
|
CVE-2026-35517 |
8.8 | 0.0086 | NET LOW CX NO UI | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics fo | |
|
68
|
CVE-2026-85363 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker | |
|
68
|
CVE-2026-96235 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over | |
|
68
|
CVE-2026-88186 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-97004 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97007 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97008 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unaut | |
|
68
|
CVE-2026-97738 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Use after free in Microsoft Office Excel allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-97746 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unaut | |
|
68
|
CVE-2026-97748 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97757 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97762 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to | |
|
68
|
CVE-2026-97763 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97768 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-102858 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized at | |
|
68
|
CVE-2026-69614 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized at | |
|
68
|
CVE-2026-78518 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to | |
|
68
|
CVE-2026-54469 |
8.8 | 0.0086 | NET LOW CX NO UI | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deseria | |
|
68
|
CVE-2026-72831 |
8.7 | 0.0086 | NET LOW CX NO UI | The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an inc | |
|
68
|
CVE-2026-85931 |
8.8 | 0.0085 | NET LOW CX NO UI | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an au | |
|
68
|
CVE-2026-88142 |
8.8 | 0.0085 | NET LOW CX NO UI | Use after free in Windows Background Intelligent Transfer Service (BITS) allows | |
|
67
|
CVE-2026-57516 |
8.6 | 0.0086 | NET NO AUTH LOW CX | Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebD | |
|
67
|
CVE-2026-75877 |
8.6 | 0.0085 | NET LOW CX NO UI | A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affec | |
|
67
|
CVE-2026-75976 |
8.6 | 0.0085 | NET LOW CX NO UI | A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the | |
|
65
|
CVE-2026-13515 |
7.4 | 0.0085 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted | |
|
65
|
CVE-2026-13516 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is | |
|
65
|
CVE-2026-13517 |
7.4 | 0.0085 | NET LOW CX NO UI | A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the fu | |
|
65
|
CVE-2026-13518 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the func | |
|
65
|
CVE-2026-13519 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function | |
|
65
|
CVE-2026-13539 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impact | |
|
65
|
CVE-2026-15543 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formC | |
|
65
|
CVE-2026-15691 |
7.4 | 0.0085 | NET LOW CX NO UI | A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects | |
|
65
|
CVE-2026-15692 |
7.4 | 0.0085 | NET LOW CX NO UI | A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability | |
|
65
|
CVE-2026-15693 |
7.4 | 0.0085 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This i | |
|
65
|
CVE-2026-15694 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the func | |
|
65
|
CVE-2026-15695 |
7.4 | 0.0085 | NET LOW CX NO UI | A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the | |
|
65
|
CVE-2026-15696 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted eleme | |
|
65
|
CVE-2026-16248 |
7.4 | 0.0085 | NET LOW CX NO UI | A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affe | |
|
64
|
CVE-2026-40076 |
9.4 | 0.0085 | NET LOW CX NO UI | OpenMRS Core is an open source electronic medical record system platform. In ver | |
|
60
|
CVE-2026-92158 |
7.2 | 0.0086 | NET LOW CX NO UI | F´ (F Prime) is a framework that enables development and deployment of spaceflig |