Hunt List
12,868 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
90
|
CVE-2026-31158 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | 1 PoC | SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 a |
|
80
|
CVE-2026-52186 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a | |
|
80
|
CVE-2026-51821 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 all | |
|
80
|
CVE-2026-109219 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in ve | |
|
80
|
CVE-2026-72565 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenti | |
|
80
|
CVE-2024-57521 |
10.0 | 0.0068 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker | |
|
80
|
CVE-2026-28564 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnera | |
|
80
|
CVE-2026-71289 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implement | |
|
80
|
CVE-2026-68079 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code | |
|
80
|
CVE-2026-80980 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/smc: st | |
|
80
|
CVE-2026-89526 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Va | |
|
80
|
CVE-2026-90104 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: ze | |
|
80
|
CVE-2026-52439 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary | |
|
80
|
CVE-2026-14974 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote a | |
|
80
|
CVE-2026-50772 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execut | |
|
79
|
CVE-2026-74886 |
9.3 | 0.0068 | NET NO AUTH LOW CX NO UI | openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerabil | |
|
79
|
CVE-2026-50561 |
9.4 | 0.0068 | NET NO AUTH LOW CX NO UI | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent | |
|
79
|
CVE-2026-117532 |
9.3 | 0.0068 | NET NO AUTH LOW CX NO UI | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerabi | |
|
78
|
CVE-2026-5787 |
9.1 | 0.0069 | NET NO AUTH LOW CX NO UI | An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7 | |
|
78
|
CVE-2026-45677 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
78
|
CVE-2026-71962 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerabili | |
|
78
|
CVE-2026-116011 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json | |
|
78
|
CVE-2026-27690 |
9.1 | 0.0068 | NET NO AUTH LOW CX NO UI | Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthentica | |
|
75
|
CVE-2026-45367 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
75
|
CVE-2026-49485 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
75
|
CVE-2026-52956 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: libceph: Fi | |
|
75
|
CVE-2026-80637 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: netfilter: | |
|
75
|
CVE-2026-90234 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFS: Return | |
|
75
|
CVE-2026-60080 |
7.3 | 0.0068 | NET NO AUTH LOW CX NO UI | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. T | |
|
75
|
CVE-2026-68500 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | Sylius Mollie Plugin provides Mollie payment integration for Sylius applications | |
|
75
|
CVE-2026-55470 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
75
|
CVE-2026-64194 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS com | |
|
69
|
CVE-2026-66088 |
9.4 | 0.0069 | NET LOW CX NO UI | In openEQUELLA before 2026.1, the system.execute() function available to the scr | |
|
68
|
CVE-2026-69854 |
9.0 | 0.0069 | NET NO AUTH NO UI | Improper authentication in Spring Cloud Azure allows an unauthorized attacker to | |
|
68
|
CVE-2026-35521 |
8.8 | 0.0069 | NET LOW CX NO UI | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics fo | |
|
68
|
CVE-2023-25739 |
8.8 | 0.0068 | NET NO AUTH LOW CX | Module load requests that failed were not being checked as to whether or not the | |
|
68
|
CVE-2026-57527 |
8.7 | 0.0068 | NET NO AUTH LOW CX | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure de | |
|
68
|
CVE-2026-35168 |
8.8 | 0.0068 | NET LOW CX NO UI | OpenSTAManager is an open source management software for technical assistance an | |
|
68
|
CVE-2026-11325 |
8.8 | 0.0068 | NET NO AUTH LOW CX | Description Cloudflare was recently notified by external researchers of vulne | |
|
68
|
CVE-2026-72382 |
8.8 | 0.0068 | NET LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reje | |
|
68
|
CVE-2026-73614 |
8.7 | 0.0068 | NET LOW CX NO UI | Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 cha | |
|
67
|
CVE-2026-54730 |
8.6 | 0.0068 | NET LOW CX NO UI | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, t | |
|
66
|
CVE-2026-54593 |
8.1 | 0.0068 | NET LOW CX NO UI | Pterodactyl is a free, open-source game server management panel. Prior to Panel | |
|
64
|
CVE-2026-42100 |
7.1 | 0.0068 | NET LOW CX NO UI | Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server a | |
|
63
|
CVE-2026-44193 |
9.1 | 0.0069 | NET LOW CX NO UI | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, the | |
|
63
|
CVE-2026-39465 |
9.1 | 0.0068 | NET LOW CX NO UI | Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 | |
|
62
|
CVE-2026-117607 |
8.6 | 0.0068 | NET LOW CX NO UI | Xerte Online Toolkits through 3.15.5 contains a remote code execution vulnerabil | |
|
60
|
CVE-2026-9779 |
7.2 | 0.0068 | NET LOW CX NO UI | ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signat | |
|
55
|
CVE-2026-61363 |
7.5 | 0.0068 | NET NO AUTH | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac | |
|
55
|
CVE-2026-59134 |
7.5 | 0.0068 | NET NO AUTH | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac |