Hunt List
12,844 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-72567 |
9.8 | 0.0079 | NET NO AUTH LOW CX NO UI | An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through c | |
|
80
|
CVE-2026-7524 |
9.8 | 0.0079 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to im | |
|
80
|
CVE-2026-64606 |
9.8 | 0.0078 | NET NO AUTH LOW CX NO UI | Deserialization of untrusted data vulnerability that may allow class-registratio | |
|
79
|
CVE-2026-60112 |
9.3 | 0.0079 | NET NO AUTH LOW CX NO UI | AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authenticatio | |
|
79
|
CVE-2026-8979 |
9.3 | 0.0078 | NET NO AUTH LOW CX NO UI | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an auth | |
|
79
|
CVE-2026-48853 |
9.2 | 0.0078 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data and Allocation of Resources Without Limits or | |
|
79
|
CVE-2026-63382 |
9.2 | 0.0078 | NET NO AUTH LOW CX NO UI | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the | |
|
78
|
CVE-2026-103882 |
9.1 | 0.0079 | NET NO AUTH LOW CX NO UI | The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugi | |
|
78
|
CVE-2026-118579 |
8.9 | 0.0079 | NET NO AUTH LOW CX NO UI | A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element i | |
|
78
|
CVE-2026-3505 |
8.7 | 0.0079 | NET NO AUTH LOW CX NO UI | Allocation of resources without limits or throttling, Uncontrolled Resource Cons | |
|
78
|
CVE-2026-66729 |
8.7 | 0.0078 | NET NO AUTH LOW CX NO UI | facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the | |
|
78
|
CVE-2026-66730 |
8.7 | 0.0078 | NET NO AUTH LOW CX NO UI | facil.io 0.6.0 through 0.7.6 contains a denial-of-service vulnerability in the m | |
|
78
|
CVE-2026-66731 |
8.7 | 0.0078 | NET NO AUTH LOW CX NO UI | facil.io 0.7.5 through 0.7.6 contains a denial-of-service vulnerability in the H | |
|
78
|
CVE-2026-18140 |
8.7 | 0.0078 | NET NO AUTH LOW CX NO UI | Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runti | |
|
75
|
CVE-2026-28811 |
7.5 | 0.0079 | NET NO AUTH LOW CX NO UI | Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. | |
|
75
|
CVE-2026-34665 |
7.5 | 0.0079 | NET NO AUTH LOW CX NO UI | CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are af | |
|
75
|
CVE-2026-39820 |
7.5 | 0.0078 | NET NO AUTH LOW CX NO UI | Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were | |
|
75
|
CVE-2026-67432 |
7.5 | 0.0078 | NET NO AUTH LOW CX NO UI | MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and cli | |
|
70
|
CVE-2026-54823 |
9.9 | 0.0079 | NET LOW CX NO UI | Contributor Remote Code Execution (RCE) in Widget Options <= 4.2.3 versions. | |
|
70
|
CVE-2026-59543 |
9.9 | 0.0079 | NET LOW CX NO UI | Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions. | |
|
70
|
CVE-2026-65548 |
9.9 | 0.0079 | NET LOW CX NO UI | Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions. | |
|
70
|
CVE-2026-32444 |
9.9 | 0.0079 | NET LOW CX NO UI | Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions. | |
|
70
|
CVE-2026-54680 |
9.9 | 0.0078 | NET LOW CX NO UI | Logging operator automates the deployment and configuration of Kubernetes loggin | |
|
69
|
CVE-2026-87701 |
9.6 | 0.0079 | NET LOW CX NO UI | Improper neutralization of special elements in output used by a downstream compo | |
|
69
|
CVE-2026-48519 |
9.6 | 0.0078 | NET NO AUTH LOW CX | Langflow is a tool for building and deploying AI-powered agents and workflows. P | |
|
68
|
CVE-2026-49255 |
8.8 | 0.0079 | NET NO AUTH LOW CX | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ft | |
|
68
|
CVE-2026-102862 |
8.8 | 0.0079 | NET LOW CX NO UI | Incorrect authorization in Microsoft Office SharePoint allows an authorized atta | |
|
68
|
CVE-2024-39024 |
8.8 | 0.0079 | NET LOW CX NO UI | In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote | |
|
68
|
CVE-2026-14270 |
8.8 | 0.0079 | NET LOW CX NO UI | The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCom | |
|
68
|
CVE-2026-72781 |
8.7 | 0.0079 | NET LOW CX NO UI | Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before 4.18.3 con | |
|
68
|
CVE-2026-48381 |
9.0 | 0.0078 | NET NO AUTH NO UI | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia | |
|
68
|
CVE-2026-34153 |
8.8 | 0.0078 | NET LOW CX NO UI | Coolify is an open-source and self-hostable tool for managing servers, applicati | |
|
68
|
CVE-2026-34034 |
8.8 | 0.0078 | NET LOW CX NO UI | Coolify is an open-source and self-hostable tool for managing servers, applicati | |
|
66
|
CVE-2026-70269 |
8.1 | 0.0079 | NET NO AUTH NO UI | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
66
|
CVE-2026-62391 |
8.1 | 0.0079 | NET LOW CX NO UI | The security fix for CVE-2025-66518 is incomplete. Any client who can access to | |
|
66
|
CVE-2026-70197 |
8.1 | 0.0079 | NET NO AUTH NO UI | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over | |
|
66
|
CVE-2026-58617 |
8.1 | 0.0079 | NET NO AUTH LOW CX | Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized | |
|
65
|
CVE-2026-4960 |
7.4 | 0.0079 | NET LOW CX NO UI | A vulnerability was determined in Tenda AC6 15.03.05.16. Affected is the functio | |
|
65
|
CVE-2026-4961 |
7.4 | 0.0079 | NET LOW CX NO UI | A vulnerability was identified in Tenda AC6 15.03.05.16. Affected by this vulner | |
|
65
|
CVE-2026-5984 |
7.4 | 0.0078 | NET LOW CX NO UI | A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the funct | |
|
63
|
CVE-2026-56160 |
9.1 | 0.0079 | NET LOW CX NO UI | Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized att | |
|
63
|
CVE-2026-28302 |
9.1 | 0.0079 | NET LOW CX NO UI | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln | |
|
63
|
CVE-2026-28304 |
9.1 | 0.0079 | NET LOW CX NO UI | SolarWinds Serv-U is affected by a remote code execution vulnerability that, whe | |
|
63
|
CVE-2026-28305 |
9.1 | 0.0079 | NET LOW CX NO UI | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln | |
|
63
|
CVE-2026-28308 |
9.1 | 0.0079 | NET LOW CX NO UI | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln | |
|
62
|
CVE-2026-29001 |
8.6 | 0.0079 | NET LOW CX NO UI | TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that all | |
|
60
|
CVE-2026-73330 |
7.5 | 0.0079 | NET LOW CX NO UI | CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that a | |
|
57
|
CVE-2026-40938 |
8.5 | 0.0079 | NET NO UI | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style | |
|
55
|
CVE-2024-26010 |
7.5 | 0.0079 | NET NO AUTH | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7. | |
|
55
|
CVE-2026-70355 |
7.3 | 0.0078 | NET LOW CX | Improper neutralization of input during web page generation ('cross-site scripti |