Hunt List
12,902 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-16395 |
9.8 | 0.0062 | NET NO AUTH LOW CX NO UI | Integer overflow in the Audio/Video component. This vulnerability was fixed in F | |
|
80
|
CVE-2026-16402 |
9.8 | 0.0062 | NET NO AUTH LOW CX NO UI | Integer overflow in the Graphics: ImageLib component. This vulnerability was fix | |
|
80
|
CVE-2026-16408 |
9.8 | 0.0062 | NET NO AUTH LOW CX NO UI | Integer overflow in the Audio/Video: Playback component. This vulnerability was | |
|
80
|
CVE-2026-54489 |
9.8 | 0.0062 | NET NO AUTH LOW CX NO UI | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10. | |
|
79
|
CVE-2026-66794 |
9.3 | 0.0062 | NET NO AUTH LOW CX NO UI | A flaw was found in the `cluster-proxy-addon` component of Multicluster Engine f | |
|
78
|
CVE-2026-59935 |
8.7 | 0.0062 | NET NO AUTH LOW CX NO UI | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an att | |
|
78
|
CVE-2026-59936 |
8.7 | 0.0062 | NET NO AUTH LOW CX NO UI | pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an att | |
|
78
|
CVE-2026-7719 |
8.9 | 0.0062 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227. The | |
|
78
|
CVE-2026-53918 |
8.8 | 0.0062 | NET NO AUTH LOW CX NO UI | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. P | |
|
78
|
CVE-2026-40062 |
8.7 | 0.0062 | NET NO AUTH LOW CX NO UI | A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier. A rem | |
|
77
|
CVE-2026-8468 |
8.2 | 0.0062 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in plug_proje | |
|
76
|
CVE-2026-65600 |
7.8 | 0.0062 | NET NO AUTH LOW CX NO UI | Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 cont | |
|
75
|
CVE-2026-10595 |
7.5 | 0.0062 | NET NO AUTH LOW CX NO UI | A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specific | |
|
75
|
CVE-2026-44160 |
7.5 | 0.0062 | NET NO AUTH LOW CX NO UI | Fluentd collects events from various data sources and writes them to files, RDBM | |
|
75
|
CVE-2026-52844 |
7.5 | 0.0062 | NET NO AUTH LOW CX NO UI | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4 | |
|
70
|
CVE-2026-67567 |
9.9 | 0.0062 | NET LOW CX NO UI | A flaw was found in the multicloud-operators-subscription component. This vulner | |
|
69
|
CVE-2026-41203 |
9.4 | 0.0062 | NET LOW CX NO UI | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, mo | |
|
68
|
CVE-2026-55191 |
8.7 | 0.0062 | NET NO AUTH LOW CX | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0 | |
|
68
|
CVE-2026-55194 |
8.7 | 0.0062 | NET NO AUTH LOW CX | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0 | |
|
68
|
CVE-2026-108428 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108429 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108430 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108431 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-108432 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108437 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108439 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108440 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-108441 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108442 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Use after free in Microsoft Office Word allows an unauthorized attacker to execu | |
|
68
|
CVE-2026-108443 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to exe | |
|
68
|
CVE-2026-108444 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker t | |
|
68
|
CVE-2026-108445 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized atta | |
|
68
|
CVE-2026-108446 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Use after free in Microsoft Office Excel allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-108447 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108449 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108450 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-108451 |
8.8 | 0.0062 | NET NO AUTH LOW CX | Numeric truncation error in Microsoft Office Word allows an unauthorized attacke | |
|
66
|
CVE-2026-63633 |
7.7 | 0.0062 | NET NO AUTH LOW CX | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 | |
|
65
|
CVE-2026-6988 |
7.4 | 0.0062 | NET LOW CX NO UI | A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue | |
|
65
|
CVE-2026-7034 |
7.4 | 0.0062 | NET LOW CX NO UI | A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue | |
|
65
|
CVE-2026-7053 |
7.4 | 0.0062 | NET LOW CX NO UI | A security flaw has been discovered in Tenda F456 1.0.0.5. This affects the func | |
|
65
|
CVE-2026-7078 |
7.4 | 0.0062 | NET LOW CX NO UI | A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element | |
|
65
|
CVE-2026-7081 |
7.4 | 0.0062 | NET LOW CX NO UI | A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fro | |
|
65
|
CVE-2026-7098 |
7.4 | 0.0062 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is th | |
|
65
|
CVE-2026-7100 |
7.4 | 0.0062 | NET LOW CX NO UI | A flaw has been found in Tenda F456 1.0.0.5. The impacted element is the functio | |
|
63
|
CVE-2026-28314 |
9.1 | 0.0062 | NET LOW CX NO UI | SolarWinds Serv-U is affected by an insecure direct object reference vulnerabili | |
|
62
|
CVE-2026-44011 |
8.6 | 0.0062 | NET LOW CX NO UI | Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and | |
|
62
|
CVE-2026-54801 |
8.6 | 0.0062 | NET LOW CX NO UI | A vulnerability has been identified in CPCI85 Central Processing/Communication ( | |
|
60
|
CVE-2026-63453 |
7.2 | 0.0062 | NET LOW CX NO UI | Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. S | |
|
56
|
CVE-2026-57105 |
8.0 | 0.0062 | NET LOW CX | Improper neutralization of input during web page generation ('cross-site scripti |