Hunt List
11,990 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
81
|
CVE-2026-7411 |
10.0 | 0.0368 | NET NO AUTH LOW CX NO UI | In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequat | |
|
81
|
CVE-2026-53576 |
10.0 | 0.0330 | NET NO AUTH LOW CX NO UI | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 a | |
|
80
|
CVE-2026-73296 |
9.4 | 0.0365 | NET NO AUTH LOW CX NO UI | Microsoft UFO open-source framework for intelligent automation across devices an | |
|
80
|
CVE-2020-21012 |
9.8 | 0.0350 | NET NO AUTH LOW CX NO UI | Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenti | |
|
80
|
CVE-2026-5524 |
9.8 | 0.0348 | NET NO AUTH LOW CX NO UI | The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Uploa | |
|
80
|
CVE-2026-8986 |
9.5 | 0.0328 | NET NO AUTH LOW CX NO UI | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command | |
|
80
|
CVE-2026-12571 |
9.8 | 0.0327 | NET NO AUTH LOW CX NO UI | An authentication bypass in ManageEngine DDI Central's password-reset workflow a | |
|
80
|
CVE-2026-9103 |
9.8 | 0.0321 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unau | |
|
79
|
CVE-2026-41452 |
9.3 | 0.0374 | NET NO AUTH LOW CX NO UI | Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installe | |
|
79
|
CVE-2026-18601 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the fun | |
|
79
|
CVE-2026-18602 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the | |
|
79
|
CVE-2026-18614 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the func | |
|
79
|
CVE-2026-18615 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected el | |
|
79
|
CVE-2026-18616 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted el | |
|
79
|
CVE-2026-18684 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affe | |
|
79
|
CVE-2026-18685 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Imp | |
|
79
|
CVE-2026-34415 |
9.3 | 0.0357 | NET NO AUTH LOW CX NO UI | Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input vali | |
|
79
|
CVE-2026-58480 |
9.2 | 0.0357 | NET NO AUTH LOW CX NO UI | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthentic | |
|
79
|
CVE-2026-19348 |
8.9 | 0.0357 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea | |
|
79
|
CVE-2026-56782 |
9.3 | 0.0356 | NET NO AUTH LOW CX NO UI | Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/ | |
|
79
|
CVE-2026-16232 |
9.3 | 0.0352 | NET NO AUTH LOW CX NO UI | KEV | Check Point SmartConsole contains an improper authentication vulnerability which |
|
79
|
CVE-2020-37282 |
9.3 | 0.0345 | NET NO AUTH LOW CX NO UI | office-converter through 1.0.2 contains an OS command injection vulnerability th | |
|
79
|
CVE-2026-60121 |
9.3 | 0.0330 | NET NO AUTH LOW CX NO UI | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerabi | |
|
79
|
CVE-2026-41924 |
9.3 | 0.0320 | NET NO AUTH LOW CX NO UI | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command in | |
|
76
|
CVE-2026-48933 |
7.5 | 0.0371 | NET NO AUTH LOW CX NO UI | A flaw in Node.js WebCrypto implementation can crash the process if the input of | |
|
76
|
CVE-2023-2828 |
7.5 | 0.0370 | NET NO AUTH LOW CX NO UI | Every `named` instance configured to run as a recursive resolver maintains a cac | |
|
70
|
CVE-2026-45321 |
9.6 | 0.0328 | NET NO AUTH LOW CX | KEV RW | TanStack contains an unspecified vulnerability that allowed malicious versions o |
|
68
|
CVE-2024-58294 |
8.7 | 0.0357 | NET LOW CX NO UI | FreePBX 16 contains an authenticated remote code execution vulnerability in the | |
|
68
|
CVE-2026-50289 |
8.7 | 0.0356 | NET LOW CX NO UI | systeminformation is a System and OS information library for node.js. Prior to 5 | |
|
68
|
CVE-2024-58287 |
8.7 | 0.0342 | NET LOW CX NO UI | reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd paramet | |
|
68
|
CVE-2026-5174 |
8.8 | 0.0332 | NET LOW CX NO UI | Improper input validation vulnerability in Progress Software MOVEit Automation a | |
|
68
|
CVE-2026-35152 |
8.8 | 0.0328 | NET LOW CX NO UI | A SQL Injection vulnerability exists in Apache Fineract's Report Execution API ( | |
|
68
|
CVE-2026-71966 |
8.7 | 0.0328 | NET LOW CX NO UI | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command inj | |
|
68
|
CVE-2026-69096 |
8.7 | 0.0327 | NET LOW CX NO UI | OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing t | |
|
66
|
CVE-2026-60102 |
7.7 | 0.0327 | NET LOW CX NO UI | Horde Virtual File System (VFS) API before 3.0.1 contains an OS command injectio | |
|
65
|
CVE-2026-0640 |
7.4 | 0.0348 | NET LOW CX NO UI | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the funct | |
|
65
|
CVE-2026-7119 |
7.4 | 0.0327 | NET LOW CX NO UI | A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknow | |
|
65
|
CVE-2026-7160 |
7.4 | 0.0327 | NET LOW CX NO UI | A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the | |
|
65
|
CVE-2026-18598 |
7.4 | 0.0321 | NET LOW CX NO UI | A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected elem | |
|
65
|
CVE-2026-18600 |
7.4 | 0.0321 | NET LOW CX NO UI | A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects th | |
|
65
|
CVE-2026-18787 |
7.4 | 0.0321 | NET LOW CX NO UI | A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affected eleme | |
|
63
|
CVE-2026-75094 |
8.5 | 0.0318 | NET LOW CX NO UI | A flaw has been found in COMFAST CF-N1-S 2.6.0.1. This impacts the function sub_ | |
|
60
|
CVE-2026-18902 |
7.3 | 0.0382 | NET LOW CX NO UI | A vulnerability was detected in H3C NX15 V100R017. Affected by this vulnerabilit | |
|
60
|
CVE-2026-18811 |
7.3 | 0.0358 | NET LOW CX NO UI | A vulnerability was detected in H3C NX15 V100R017. The affected element is the f | |
|
60
|
CVE-2026-18812 |
7.3 | 0.0358 | NET LOW CX NO UI | A flaw has been found in H3C NX15 V100R017. The impacted element is the function | |
|
60
|
CVE-2026-18813 |
7.3 | 0.0358 | NET LOW CX NO UI | A vulnerability has been found in H3C NX15 V100R017. This affects the function d | |
|
60
|
CVE-2026-18814 |
7.3 | 0.0358 | NET LOW CX NO UI | A vulnerability was found in H3C NX15 V100R017. This impacts the function reload | |
|
60
|
CVE-2026-19034 |
7.3 | 0.0318 | NET LOW CX NO UI | A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vuln | |
|
60
|
CVE-2026-19035 |
7.3 | 0.0318 | NET LOW CX NO UI | A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issu | |
|
60
|
CVE-2026-19036 |
7.3 | 0.0318 | NET LOW CX NO UI | A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the |