Hunt List
12,881 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
89
|
CVE-2026-97631 |
9.5 | 0.0063 | NET NO AUTH LOW CX NO UI | 3 PoC | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Writ |
|
80
|
CVE-2026-16363 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability | |
|
80
|
CVE-2026-16369 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Integer overflow in the JavaScript: WebAssembly component. This vulnerability wa | |
|
80
|
CVE-2026-16389 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions, integer overflow in the Libraries component in NS | |
|
80
|
CVE-2026-27780 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while pr | |
|
79
|
CVE-2026-69102 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT sig | |
|
79
|
CVE-2026-54211 |
9.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_ | |
|
79
|
CVE-2026-40504 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in t | |
|
79
|
CVE-2026-59705 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | mem0's openmemory/api component contains an unauthenticated access vulnerability | |
|
78
|
CVE-2026-56445 |
8.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The qrscp application's C-STORE handler uses a specific instance from attacker-s | |
|
78
|
CVE-2026-39806 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel | |
|
78
|
CVE-2026-49128 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulne | |
|
78
|
CVE-2026-8805 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mits | |
|
78
|
CVE-2026-8806 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Ser | |
|
78
|
CVE-2026-15308 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-se | |
|
78
|
CVE-2026-56124 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | phpUploader before 2.0.2 contains an unauthenticated information disclosure vuln | |
|
78
|
CVE-2026-44628 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | An unauthenticated attacker can crash the worklist server with a single crafted | |
|
78
|
CVE-2026-24013 |
9.1 | 0.0063 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift | |
|
77
|
CVE-2026-24253 |
8.2 | 0.0064 | NET NO AUTH LOW CX NO UI | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a | |
|
77
|
CVE-2026-64400 |
8.6 | 0.0064 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prev | |
|
77
|
CVE-2026-34327 |
8.2 | 0.0064 | NET NO AUTH LOW CX NO UI | Externally controlled reference to a resource in another sphere in Microsoft Par | |
|
75
|
CVE-2026-5437 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM m | |
|
75
|
CVE-2025-65418 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traver | |
|
75
|
CVE-2026-48619 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of O | |
|
75
|
CVE-2026-57098 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Improper verification of cryptographic signature in Windows RDP Client allows an | |
|
75
|
CVE-2026-44241 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Micronaut Framework is a JVM-based full stack Java framework designed for buildi | |
|
75
|
CVE-2026-59725 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Socket.IO enables bidirectional and low-latency communication for every platform | |
|
75
|
CVE-2026-70646 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | aiosend is a synchronous and asynchronous Crypto Pay API client. Pror to version | |
|
69
|
CVE-2026-61445 |
9.4 | 0.0064 | NET LOW CX NO UI | PraisonAI before 4.6.78 contains arbitrary file write and command execution vuln | |
|
69
|
CVE-2026-8987 |
9.4 | 0.0064 | NET LOW CX NO UI | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer | |
|
69
|
CVE-2026-34659 |
9.6 | 0.0063 | NET NO AUTH LOW CX | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deser | |
|
68
|
CVE-2026-66014 |
8.8 | 0.0064 | NET LOW CX NO UI | JFrog Artifactory contains an authentication handling weakness in internal reque | |
|
68
|
CVE-2026-47161 |
8.7 | 0.0064 | NET LOW CX NO UI | RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7 | |
|
68
|
CVE-2026-3821 |
8.8 | 0.0064 | NET LOW CX NO UI | Supermicro (SMC) SMASH services contain an Arbitrary code execution issue in X14 | |
|
68
|
CVE-2026-70431 |
8.8 | 0.0064 | NET LOW CX NO UI | Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scriptin | |
|
68
|
CVE-2026-88077 |
8.8 | 0.0064 | NET NO AUTH LOW CX | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unau | |
|
68
|
CVE-2024-58362 |
8.7 | 0.0064 | NET LOW CX NO UI | SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary | |
|
68
|
CVE-2026-112688 |
8.8 | 0.0063 | NET NO AUTH LOW CX | A memory corruption issue was addressed with improved memory handling. This issu | |
|
67
|
CVE-2026-61443 |
8.6 | 0.0064 | NET LOW CX NO UI | PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillT | |
|
66
|
CVE-2026-85899 |
8.1 | 0.0064 | NET LOW CX NO UI | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker | |
|
65
|
CVE-2026-7080 |
7.4 | 0.0064 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts t | |
|
65
|
CVE-2026-7101 |
7.4 | 0.0064 | NET LOW CX NO UI | A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function | |
|
64
|
CVE-2026-57520 |
7.1 | 0.0064 | NET LOW CX NO UI | Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability t | |
|
64
|
CVE-2026-65675 |
7.1 | 0.0064 | NET NO AUTH LOW CX | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an una | |
|
63
|
CVE-2026-10059 |
9.1 | 0.0064 | NET LOW CX NO UI | A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator contro | |
|
63
|
CVE-2026-41167 |
9.1 | 0.0064 | NET LOW CX NO UI | Jellystat is a free and open source Statistics App for Jellyfin. Prior to versio | |
|
62
|
CVE-2024-56839 |
8.6 | 0.0064 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.1 | |
|
60
|
CVE-2024-56840 |
7.5 | 0.0064 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.1 | |
|
57
|
CVE-2026-70341 |
8.5 | 0.0064 | NET NO UI | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker | |
|
55
|
CVE-2026-96237 |
7.5 | 0.0064 | NET NO AUTH | Inclusion of functionality from untrusted control sphere in .NET allows an unaut |