Hunt List
11,997 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-57827 |
10.0 | 0.0233 | NET NO AUTH LOW CX NO UI | Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles compone | |
|
80
|
CVE-2026-67261 |
9.8 | 0.0232 | NET NO AUTH LOW CX NO UI | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10. | |
|
80
|
CVE-2026-10134 |
10.0 | 0.0232 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret ava | |
|
80
|
CVE-2022-44276 |
9.8 | 0.0230 | NET NO AUTH LOW CX NO UI | In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions r | |
|
80
|
CVE-2026-77647 |
9.8 | 0.0229 | NET NO AUTH LOW CX NO UI | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary | |
|
80
|
CVE-2026-114575 |
10.0 | 0.0221 | NET NO AUTH LOW CX NO UI | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by thi | |
|
80
|
CVE-2026-10768 |
9.8 | 0.0213 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful | |
|
80
|
CVE-2026-49869 |
10.0 | 0.0209 | NET NO AUTH LOW CX NO UI | KEV | Kestra OSS contains an OS command injection vulnerability that could allow an un |
|
80
|
CVE-2026-34976 |
10.0 | 0.0207 | NET NO AUTH LOW CX NO UI | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the rest | |
|
79
|
CVE-2026-61459 |
9.3 | 0.0236 | NET NO AUTH LOW CX NO UI | MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability | |
|
79
|
CVE-2026-116485 |
9.3 | 0.0235 | NET NO AUTH LOW CX NO UI | danmu_api before 1.21.7 contains an authentication bypass vulnerability that all | |
|
79
|
CVE-2026-63766 |
9.3 | 0.0215 | NET NO AUTH LOW CX NO UI | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability | |
|
79
|
CVE-2026-59800 |
9.2 | 0.0208 | NET NO AUTH LOW CX NO UI | 9Router before 0.4.44 contains an OS command injection vulnerability in the unau | |
|
79
|
CVE-2026-33845 |
9.1 | 0.0207 | NET NO AUTH LOW CX NO UI | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero len | |
|
78
|
CVE-2026-7244 |
8.9 | 0.0242 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The | |
|
78
|
CVE-2026-41304 |
8.9 | 0.0222 | NET NO AUTH LOW CX NO UI | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `c | |
|
78
|
CVE-2026-6140 |
8.9 | 0.0220 | NET NO AUTH LOW CX NO UI | A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts | |
|
78
|
CVE-2026-6132 |
8.9 | 0.0217 | NET NO AUTH LOW CX NO UI | A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024. Affecte | |
|
78
|
CVE-2026-7248 |
8.9 | 0.0215 | NET NO AUTH LOW CX NO UI | A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the functio | |
|
78
|
CVE-2026-5977 |
8.9 | 0.0211 | NET NO AUTH LOW CX NO UI | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This im | |
|
75
|
CVE-2023-42344 |
7.3 | 0.0234 | NET NO AUTH LOW CX NO UI | Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain | |
|
75
|
CVE-2025-60751 |
7.5 | 0.0228 | NET NO AUTH LOW CX NO UI | GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDe | |
|
75
|
CVE-2023-22795 |
7.5 | 0.0228 | NET NO AUTH LOW CX NO UI | A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7. | |
|
75
|
CVE-2026-71209 |
7.5 | 0.0225 | NET NO AUTH LOW CX NO UI | audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches | |
|
75
|
CVE-2023-23919 |
7.5 | 0.0221 | NET NO AUTH LOW CX NO UI | A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14 | |
|
75
|
CVE-2026-54066 |
7.5 | 0.0217 | NET NO AUTH LOW CX NO UI | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, t | |
|
75
|
CVE-2025-60335 |
7.5 | 0.0213 | NET NO AUTH LOW CX NO UI | A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_ | |
|
75
|
CVE-2026-59861 |
7.5 | 0.0205 | NET NO AUTH LOW CX NO UI | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0 | |
|
70
|
CVE-2026-72603 |
9.9 | 0.0223 | NET LOW CX NO UI | An OS command injection vulnerability in wg-easy 15.3.0 allows users with the cl | |
|
69
|
CVE-2026-64879 |
9.4 | 0.0226 | NET LOW CX NO UI | A filename supplied during file upload is not properly sanitized before being us | |
|
68
|
CVE-2026-18264 |
8.8 | 0.0227 | NET LOW CX NO UI | NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vu | |
|
68
|
CVE-2026-64881 |
8.7 | 0.0223 | NET LOW CX NO UI | The audit file upload handler does not sanitize filenames, allowing shell metach | |
|
68
|
CVE-2026-67325 |
8.7 | 0.0221 | NET LOW CX NO UI | GitPython before 3.1.51 contains an incomplete command injection blocklist that | |
|
68
|
CVE-2026-86396 |
8.8 | 0.0217 | NET LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
68
|
CVE-2023-22794 |
8.8 | 0.0215 | NET LOW CX NO UI | A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the s | |
|
68
|
CVE-2026-100214 |
8.8 | 0.0207 | NET LOW CX NO UI | Deserialization of untrusted data in Dynamics Business Central allows an authori | |
|
68
|
CVE-2023-2017 |
8.8 | 0.0207 | NET LOW CX NO UI | Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 | |
|
68
|
CVE-2026-64901 |
8.8 | 0.0204 | NET LOW CX NO UI | Deserialization of untrusted data in Microsoft Office SharePoint allows an autho | |
|
65
|
CVE-2026-59867 |
7.1 | 0.0239 | NET NO AUTH LOW CX | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5 | |
|
65
|
CVE-2026-39866 |
7.4 | 0.0235 | NET LOW CX NO UI | Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f5 | |
|
64
|
CVE-2026-28316 |
9.1 | 0.0213 | NET LOW CX NO UI | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vuln | |
|
63
|
CVE-2026-116219 |
8.6 | 0.0208 | NET LOW CX NO UI | Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in | |
|
60
|
CVE-2026-38710 |
7.2 | 0.0233 | NET LOW CX NO UI | TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection | |
|
60
|
CVE-2026-9777 |
7.2 | 0.0223 | NET LOW CX NO UI | ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. T | |
|
60
|
CVE-2026-9778 |
7.2 | 0.0223 | NET LOW CX NO UI | ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerabi | |
|
60
|
CVE-2026-86395 |
7.2 | 0.0219 | NET LOW CX NO UI | Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 | |
|
60
|
CVE-2026-86399 |
7.2 | 0.0219 | NET LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
60
|
CVE-2026-86394 |
7.2 | 0.0219 | NET LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
60
|
CVE-2026-3519 |
7.2 | 0.0213 | NET LOW CX NO UI | OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC | |
|
60
|
CVE-2026-4048 |
7.2 | 0.0213 | NET LOW CX NO UI | OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC P |