Hunt List
18,634 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-59836 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 | |
|
79
|
CVE-2026-46423 |
9.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
79
|
CVE-2026-91644 |
9.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
78
|
CVE-2026-5300 |
9.1 | 0.0022 | NET NO AUTH LOW CX NO UI | Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows una | |
|
78
|
CVE-2026-6900 |
9.1 | 0.0022 | NET NO AUTH LOW CX NO UI | Improper certificate validation vulnerability in B&R Industrial Automation GmbH | |
|
75
|
CVE-2026-0156 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety | |
|
75
|
CVE-2026-58865 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | In multiple functions of PduParser.java, there is a possible persistent denial o | |
|
75
|
CVE-2026-22750 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | When configuring SSL bundles in Spring Cloud Gateway by using the configuration | |
|
75
|
CVE-2026-56454 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the u | |
|
74
|
CVE-2026-64671 |
7.2 | 0.0022 | NET NO AUTH LOW CX NO UI | Waline is a comment system with backend support. In versions 3.15.2 and prior, t | |
|
68
|
CVE-2026-23776 |
8.8 | 0.0022 | NET LOW CX NO UI | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Featu | |
|
68
|
CVE-2026-113229 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Improper signature verification in Loader in Google Chrome prior to 156.0.8078.4 | |
|
68
|
CVE-2026-118018 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Spoofing issue in the Downloads component in Firefox for Android. This vulnerabi | |
|
68
|
CVE-2026-6761 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Privilege escalation in the Networking component. This vulnerability was fixed i | |
|
68
|
CVE-2026-118327 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Incorrect authorization in Media in Google Chrome prior to 156.0.8078.73 allowed | |
|
68
|
CVE-2026-118338 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Observable discrepancy in Animation in Google Chrome prior to 156.0.8078.73 allo | |
|
68
|
CVE-2026-118346 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Out of bounds read in Compositing in Google Chrome prior to 156.0.8078.73 allowe | |
|
67
|
CVE-2026-96414 |
8.7 | 0.0022 | NET LOW CX NO UI | In affected versions of Octopus Server, insufficient integrity protection of aut | |
|
67
|
CVE-2026-124488 |
8.6 | 0.0022 | NET LOW CX NO UI | OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows | |
|
67
|
CVE-2026-121426 |
8.3 | 0.0022 | NET NO AUTH NO UI | Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in | |
|
67
|
CVE-2026-121620 |
8.3 | 0.0022 | NET NO AUTH NO UI | CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vu | |
|
66
|
CVE-2026-42602 |
8.1 | 0.0022 | NET LOW CX NO UI | azureauthextension is the Azure Authenticator Extension. From 0.124.0 to 0.150.0 | |
|
66
|
CVE-2026-11878 |
8.2 | 0.0022 | NET NO AUTH NO UI | Improper neutralization of input during web page generation ('cross-site scripti | |
|
66
|
CVE-2026-69105 |
8.1 | 0.0022 | NET NO AUTH LOW CX | An unauthenticated attacker may cause untrusted package content to be cached und | |
|
65
|
CVE-2026-45370 |
7.7 | 0.0022 | NET LOW CX NO UI | python-utcp is the python implementation of UTCP. Prior to 1.1.3, _prepare_envir | |
|
65
|
CVE-2026-116896 |
7.7 | 0.0022 | NET LOW CX NO UI | REDAXO before 5.21.5 contains a missing authorization vulnerability in the backu | |
|
65
|
CVE-2026-53425 |
7.6 | 0.0022 | NET NO AUTH LOW CX | Insufficient Verification of Data Authenticity vulnerability in dropbox samly al | |
|
65
|
CVE-2026-91871 |
7.4 | 0.0022 | NET NO AUTH NO UI | Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improp | |
|
65
|
CVE-2026-47684 |
7.7 | 0.0022 | NET LOW CX NO UI | Sync-in Server is a secure, open-source platform for file storage, sharing, coll | |
|
65
|
CVE-2026-55544 |
7.6 | 0.0022 | NET LOW CX NO UI | NextCRM is open-source customer relationship management (CRM) software. In versi | |
|
65
|
CVE-2026-50575 |
7.7 | 0.0022 | NET NO AUTH NO UI | BetterDesk is a remote desktop management solution. BetterDesk versions through | |
|
65
|
CVE-2026-91659 |
7.7 | 0.0022 | NET LOW CX NO UI | Vulnerability in Oracle Essbase (component: Build). The supported version that | |
|
64
|
CVE-2026-40833 |
7.1 | 0.0022 | NET LOW CX NO UI | An low privileged remote attacker can exploit an unauthenticated SQL Injection v | |
|
64
|
CVE-2026-40834 |
7.1 | 0.0022 | NET LOW CX NO UI | An low privileged remote attacker can exploit an unauthenticated SQL Injection v | |
|
64
|
CVE-2026-40836 |
7.1 | 0.0022 | NET LOW CX NO UI | An low privileged remote attacker can exploit an unauthenticated SQL Injection v | |
|
64
|
CVE-2026-63575 |
7.1 | 0.0022 | NET NO AUTH LOW CX | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12Parame | |
|
64
|
CVE-2026-123517 |
7.1 | 0.0022 | NET LOW CX NO UI | Vikunja before 2.7.1 contains an information disclosure vulnerability that allow | |
|
64
|
CVE-2026-109899 |
7.1 | 0.0022 | NET LOW CX NO UI | Missing Authorization vulnerability in Melapress Melapress Role Editor melapress | |
|
62
|
CVE-2026-13303 |
8.7 | 0.0022 | NET LOW CX NO UI | HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side reque | |
|
57
|
CVE-2026-7956 |
8.3 | 0.0022 | NET NO AUTH | Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a r | |
|
57
|
CVE-2026-7963 |
8.3 | 0.0022 | NET NO AUTH | Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.77 | |
|
57
|
CVE-2026-12464 |
8.3 | 0.0022 | NET NO AUTH | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a rem | |
|
57
|
CVE-2026-12467 |
8.3 | 0.0022 | NET NO AUTH | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a | |
|
57
|
CVE-2026-35228 |
8.7 | 0.0022 | NET LOW CX | Vulnerability in the Oracle MCP Server Helper Tool product of Oracle Open Source | |
|
56
|
CVE-2026-119287 |
8.0 | 0.0022 | NET LOW CX | Zuke is a code-first, strongly typed build automation system for Deno. Prior to | |
|
55
|
CVE-2026-17916 |
7.5 | 0.0022 | NET NO AUTH | Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922 | |
|
55
|
CVE-2026-76306 |
7.5 | 0.0022 | NET NO UI | In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could u | |
|
55
|
CVE-2026-101837 |
7.7 | 0.0022 | NET NO UI | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit | |
|
51
|
CVE-2026-39598 |
8.0 | 0.0022 | NET NO UI | Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Aca | |
|
51
|
CVE-2026-104615 |
7.9 | 0.0022 | NET NO UI | A security vulnerability was discovered in SUSE Rancher Fleet's cluster registra |