Hunt List
18,165 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-48772 |
10.0 | 0.0023 | NET NO AUTH LOW CX NO UI | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions | |
|
79
|
CVE-2026-56073 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP ve | |
|
79
|
CVE-2026-117656 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the S | |
|
78
|
CVE-2026-82509 |
9.1 | 0.0023 | NET NO AUTH LOW CX NO UI | V programming language standard library net.http through version 0.5.2 prior to | |
|
78
|
CVE-2026-42514 |
8.8 | 0.0023 | NET NO AUTH LOW CX NO UI | This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext with | |
|
75
|
CVE-2026-119283 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | joserfc is a Python library that provides an implementation of several JSON Obje | |
|
75
|
CVE-2026-42377 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exp | |
|
75
|
CVE-2026-118582 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal | |
|
75
|
CVE-2025-65831 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | The application uses an insecure hashing algorithm (MD5) to hash passwords. If a | |
|
74
|
CVE-2026-120075 |
7.2 | 0.0023 | NET NO AUTH LOW CX NO UI | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scri | |
|
69
|
CVE-2026-14398 |
9.6 | 0.0023 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote | |
|
69
|
CVE-2026-14419 |
9.6 | 0.0023 | NET NO AUTH LOW CX | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote | |
|
69
|
CVE-2026-118337 |
9.3 | 0.0023 | NET NO AUTH LOW CX | Use after free in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote | |
|
68
|
CVE-2026-55237 |
8.8 | 0.0023 | NET NO AUTH LOW CX | AutoGPT is a workflow automation platform for creating, deploying, and managing | |
|
68
|
CVE-2026-103407 |
8.8 | 0.0023 | NET LOW CX NO UI | An Improper Limitation of a Pathname to a Restricted Directory vulnerability in | |
|
68
|
CVE-2026-5141 |
8.8 | 0.0023 | NET NO AUTH LOW CX | Improper Privilege Management, Improper Access Control, Incorrect privilege assi | |
|
68
|
CVE-2026-2465 |
8.8 | 0.0023 | NET NO AUTH LOW CX | Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering | |
|
67
|
CVE-2026-39338 |
8.6 | 0.0023 | NET NO AUTH LOW CX | ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Re | |
|
67
|
CVE-2026-91873 |
8.7 | 0.0023 | NET NO AUTH NO UI | Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Impr | |
|
67
|
CVE-2026-122307 |
8.3 | 0.0023 | NET LOW CX NO UI | Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpol | |
|
66
|
CVE-2026-13271 |
8.1 | 0.0023 | NET LOW CX NO UI | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 throu | |
|
66
|
CVE-2026-58412 |
8.2 | 0.0023 | NET NO AUTH LOW CX | Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin | |
|
66
|
CVE-2026-121196 |
8.1 | 0.0023 | NET NO AUTH LOW CX | Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 | |
|
65
|
CVE-2026-41688 |
7.7 | 0.0023 | NET LOW CX NO UI | Wallos is an open-source, self-hostable personal subscription tracker. In versio | |
|
64
|
CVE-2025-58964 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2025-59556 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2025-62036 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-55651 |
7.1 | 0.0023 | NET LOW CX NO UI | Easy!Appointments is a self hosted appointment scheduler. In version 1.5.2, an E | |
|
64
|
CVE-2026-61993 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | |
|
64
|
CVE-2026-61995 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions | |
|
64
|
CVE-2026-105077 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.19 versions. | |
|
64
|
CVE-2026-28160 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-39786 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versi | |
|
64
|
CVE-2026-48201 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 vers | |
|
64
|
CVE-2026-54855 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions. | |
|
64
|
CVE-2026-109884 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-121765 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-121863 |
7.1 | 0.0023 | NET NO AUTH LOW CX | The Knowledge Building WordPress plugin before 0.7.3 does not escape several use | |
|
63
|
CVE-2026-6290 |
9.1 | 0.0023 | NET LOW CX NO UI | Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plu | |
|
62
|
CVE-2026-117466 |
8.6 | 0.0023 | NET LOW CX NO UI | In affected versions of Octopus Server, a user holding the System Manager role c | |
|
62
|
CVE-2026-106077 |
8.3 | 0.0023 | NET LOW CX NO UI | A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administ | |
|
58
|
CVE-2026-45144 |
8.9 | 0.0023 | NET LOW CX | Chamilo LMS is an open-source learning management system. From 2.0.0 until 2.0.1 | |
|
57
|
CVE-2026-8525 |
8.3 | 0.0023 | NET NO AUTH | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 al | |
|
57
|
CVE-2026-12016 |
8.3 | 0.0023 | NET NO AUTH | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.11 | |
|
57
|
CVE-2026-12023 |
8.3 | 0.0023 | NET NO AUTH | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a | |
|
57
|
CVE-2026-12028 |
8.3 | 0.0023 | NET NO AUTH | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowe | |
|
55
|
CVE-2026-52712 |
7.6 | 0.0023 | NET LOW CX | Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions. | |
|
55
|
CVE-2026-55583 |
7.6 | 0.0023 | NET LOW CX | Twenty is an open-source CRM (customer relationship management) platform. Prior | |
|
55
|
CVE-2026-12455 |
7.5 | 0.0023 | NET NO AUTH | Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a r | |
|
54
|
CVE-2026-116195 |
7.0 | 0.0023 | NET NO AUTH | Rclone before 1.75.2 contains a path traversal vulnerability in the local backen |