Hunt List
18,634 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-34236 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From versio | |
|
80
|
CVE-2026-43992 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-securit | |
|
80
|
CVE-2026-6508 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Re | |
|
78
|
CVE-2026-9648 |
9.1 | 0.0022 | NET NO AUTH LOW CX NO UI | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstrain | |
|
77
|
CVE-2026-16000 |
8.7 | 0.0022 | NET NO AUTH LOW CX NO UI | Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCi | |
|
77
|
CVE-2026-67073 |
8.6 | 0.0022 | NET NO AUTH LOW CX NO UI | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Co | |
|
76
|
CVE-2026-110765 |
8.2 | 0.0022 | NET NO AUTH LOW CX NO UI | FlexPrice through 2.1.38 contains an authentication bypass vulnerability in Hand | |
|
75
|
CVE-2026-52711 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions. | |
|
75
|
CVE-2026-40775 |
7.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions. | |
|
69
|
CVE-2026-7908 |
9.6 | 0.0022 | NET NO AUTH LOW CX | Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a r | |
|
69
|
CVE-2026-12027 |
9.6 | 0.0022 | NET NO AUTH LOW CX | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.11 | |
|
69
|
CVE-2026-91622 |
9.3 | 0.0022 | NET NO AUTH LOW CX | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
69
|
CVE-2026-7161 |
9.3 | 0.0022 | NET NO AUTH LOW CX | An insufficient encryption vulnerability exists in the Device Authentication fun | |
|
68
|
CVE-2026-7903 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 | |
|
68
|
CVE-2026-7973 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allo | |
|
68
|
CVE-2026-12020 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allow | |
|
68
|
CVE-2026-95779 |
8.8 | 0.0022 | NET LOW CX NO UI | An exposure of the appliance’s confidential certificate information vulnerabil | |
|
68
|
CVE-2026-7991 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote at | |
|
68
|
CVE-2026-7992 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in UI in Google Chrome on Linux, Chro | |
|
68
|
CVE-2026-7995 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a | |
|
68
|
CVE-2026-119265 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Incorrect reference resolution in Quota in Google Chrome prior to 156.0.8078.79 | |
|
68
|
CVE-2026-76029 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Improper input validation in Network in Google Chrome prior to 156.0.8078.79 all | |
|
68
|
CVE-2026-126852 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Use after free in MediaStream in Google Chrome prior to 157.0.8103.78 allowed a | |
|
67
|
CVE-2026-53857 |
8.6 | 0.0022 | NET LOW CX NO UI | OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo | |
|
67
|
CVE-2026-116825 |
8.3 | 0.0022 | NET NO AUTH NO UI | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService: | |
|
67
|
CVE-2026-124483 |
8.7 | 0.0022 | NET LOW CX NO UI | OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because t | |
|
67
|
CVE-2026-91874 |
8.7 | 0.0022 | NET NO AUTH NO UI | Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Impr | |
|
67
|
CVE-2026-91875 |
8.7 | 0.0022 | NET NO AUTH NO UI | Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Impr | |
|
67
|
CVE-2026-32989 |
8.6 | 0.0022 | NET NO AUTH LOW CX | Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability | |
|
67
|
CVE-2026-42741 |
8.5 | 0.0022 | NET LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
67
|
CVE-2026-42742 |
8.5 | 0.0022 | NET LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
67
|
CVE-2026-45211 |
8.5 | 0.0022 | NET LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
67
|
CVE-2026-109961 |
8.4 | 0.0022 | NET LOW CX NO UI | Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that all | |
|
67
|
CVE-2026-123786 |
8.4 | 0.0022 | NET LOW CX NO UI | Agenta before 0.122.5 contains a server-side request forgery vulnerability that | |
|
66
|
CVE-2026-12012 |
8.1 | 0.0022 | NET NO AUTH NO UI | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an at | |
|
66
|
CVE-2026-116192 |
8.2 | 0.0022 | NET NO AUTH NO UI | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerabil | |
|
65
|
CVE-2026-87102 |
7.4 | 0.0022 | NET NO AUTH NO UI | Sensitive information disclosure and manipulation due to improper token validati | |
|
65
|
CVE-2026-87103 |
7.4 | 0.0022 | NET NO AUTH NO UI | Sensitive information disclosure and manipulation due to improper token validati | |
|
64
|
CVE-2026-42516 |
7.1 | 0.0023 | NET LOW CX NO UI | This vulnerability exists in e-Sushrut due to improper authorization checks duri | |
|
64
|
CVE-2026-42517 |
7.1 | 0.0023 | NET LOW CX NO UI | This vulnerability exists in e-Sushrut due to the use of reversible Base64 encod | |
|
64
|
CVE-2026-33377 |
7.1 | 0.0023 | NET LOW CX NO UI | An Editor can overwrite a dashboard not owned by them to acquire admin on that s | |
|
64
|
CVE-2026-0983 |
7.1 | 0.0023 | NET LOW CX NO UI | Denial-of-service condition in M-Files Server versions before 26.5.16015.0, befo | |
|
64
|
CVE-2026-66322 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize | |
|
64
|
CVE-2026-63570 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legio | |
|
64
|
CVE-2026-62374 |
7.1 | 0.0023 | NET LOW CX NO UI | SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT | |
|
64
|
CVE-2026-116767 |
7.1 | 0.0023 | NET LOW CX NO UI | CVE-2026-116767 is an improper input handling vulnerability in Secure Access ser | |
|
58
|
CVE-2026-40487 |
9.0 | 0.0022 | NET LOW CX | Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file up | |
|
57
|
CVE-2026-7914 |
8.3 | 0.0022 | NET NO AUTH | Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778. | |
|
52
|
CVE-2026-5373 |
8.4 | 0.0022 | NET LOW CX | An issue that allowed all-organization administrators to promote accounts to sup | |
|
45
|
CVE-2026-45303 |
7.7 | 0.0022 | NET | Open WebUI is a self-hosted artificial intelligence platform designed to operate |