Hunt List
12,917 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
90
|
CVE-2026-116512 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | 1 PoC | The Project Manager – AI Powered Project Management, Task Management, Kanban Boa |
|
80
|
CVE-2024-42360 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user in | |
|
80
|
CVE-2025-62025 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch | |
|
80
|
CVE-2026-47393 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) do | |
|
80
|
CVE-2025-65719 |
9.8 | 0.0058 | NET NO AUTH LOW CX NO UI | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute ar | |
|
79
|
CVE-2026-69703 |
9.3 | 0.0059 | NET NO AUTH LOW CX NO UI | Atlas-Livre contains an improper access control vulnerability in the admin contr | |
|
79
|
CVE-2026-59873 |
9.2 | 0.0058 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, nod | |
|
79
|
CVE-2026-111643 |
9.3 | 0.0058 | NET NO AUTH LOW CX NO UI | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerabilit | |
|
78
|
CVE-2026-97555 |
8.8 | 0.0058 | NET NO AUTH LOW CX | 1 PoC | In the Linux kernel, the following vulnerability has been resolved: smb: client |
|
78
|
CVE-2026-47138 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | Parse Server is an open source backend that can be deployed to any infrastructur | |
|
78
|
CVE-2026-55574 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | vLLM is a high-throughput and memory-efficient inference and serving engine for | |
|
78
|
CVE-2026-63252 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fai | |
|
78
|
CVE-2026-56770 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vec | |
|
78
|
CVE-2026-65052 |
8.7 | 0.0058 | NET NO AUTH LOW CX NO UI | Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input | |
|
78
|
CVE-2026-64825 |
9.0 | 0.0058 | NET NO AUTH LOW CX NO UI | Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that | |
|
78
|
CVE-2026-65702 |
8.8 | 0.0058 | NET NO AUTH LOW CX NO UI | Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemCon | |
|
78
|
CVE-2026-10672 |
9.1 | 0.0058 | NET NO AUTH LOW CX NO UI | subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI | |
|
75
|
CVE-2026-59869 |
7.5 | 0.0059 | NET NO AUTH LOW CX NO UI | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and fro | |
|
75
|
CVE-2026-43101 |
7.5 | 0.0059 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: | |
|
75
|
CVE-2026-32210 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an | |
|
75
|
CVE-2026-40006 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Memory Allocation with Excessive Size Value, Allocation of Resources Without Lim | |
|
75
|
CVE-2026-82987 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | There exists a screen capture endpoint in vCast media streaming service in ViewS | |
|
75
|
CVE-2026-33258 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | By publishing and querying a crafted zone an attacker can cause allocation of la | |
|
75
|
CVE-2026-52192 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
|
75
|
CVE-2026-27779 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values | |
|
75
|
CVE-2026-68005 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a d | |
|
75
|
CVE-2026-65442 |
7.2 | 0.0058 | NET NO AUTH LOW CX NO UI | Unauthenticated Server Side Request Forgery (SSRF) in FormCraft <= 3.9.15 versio | |
|
75
|
CVE-2023-25957 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All ve | |
|
75
|
CVE-2026-55446 |
7.5 | 0.0058 | NET NO AUTH LOW CX NO UI | Langflow is a tool for building and deploying AI-powered agents and workflows. P | |
|
70
|
CVE-2026-48614 |
9.9 | 0.0058 | NET LOW CX NO UI | An improper authorization vulnerability in the Plesk XML API allows an authentic | |
|
70
|
CVE-2026-47686 |
9.9 | 0.0058 | NET LOW CX NO UI | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() | |
|
70
|
CVE-2026-71268 |
9.9 | 0.0058 | NET LOW CX NO UI | OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses dire | |
|
69
|
CVE-2026-47428 |
9.6 | 0.0058 | NET NO AUTH LOW CX | Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0 | |
|
68
|
CVE-2026-44959 |
8.8 | 0.0059 | NET LOW CX NO UI | A missing validation of user input exists when saving delivery limitations in Re | |
|
68
|
CVE-2026-96203 |
8.8 | 0.0059 | NET NO AUTH LOW CX | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke | |
|
68
|
CVE-2026-70098 |
8.8 | 0.0058 | NET NO AUTH LOW CX | Missing authorization in Visual Studio Code allows an unauthorized attacker to e | |
|
68
|
CVE-2026-35512 |
8.7 | 0.0058 | NET LOW CX NO UI | xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buf | |
|
68
|
CVE-2026-57117 |
8.8 | 0.0058 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4 | |
|
68
|
CVE-2026-55082 |
8.7 | 0.0058 | NET LOW CX NO UI | DHIS2 is a flexible information system for data capture, management, validation, | |
|
68
|
CVE-2026-85268 |
8.7 | 0.0058 | NET NO AUTH LOW CX | A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Googl | |
|
68
|
CVE-2026-6100 |
9.1 | 0.0058 | NET NO AUTH NO UI | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decomp | |
|
68
|
CVE-2024-58309 |
8.7 | 0.0058 | NET LOW CX NO UI | xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allo | |
|
67
|
CVE-2026-14471 |
8.6 | 0.0058 | NET LOW CX NO UI | Improper Neutralization of Special Elements in the metrics-service retention pol | |
|
67
|
CVE-2026-22621 |
8.3 | 0.0058 | NET LOW CX NO UI | Improper input validation in one of the session management interface of Eaton's | |
|
67
|
CVE-2026-46682 |
8.5 | 0.0058 | NET LOW CX NO UI | BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButto | |
|
66
|
CVE-2026-68560 |
7.7 | 0.0058 | NET LOW CX NO UI | Wekan is open source kanban built with Meteor. Prior to 9.75, models/fileValidat | |
|
66
|
CVE-2026-77909 |
7.7 | 0.0058 | NET LOW CX NO UI | Insufficiently protected credentials in Azure CycleCloud allows an authorized at | |
|
64
|
CVE-2026-63652 |
7.1 | 0.0058 | NET LOW CX NO UI | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0 | |
|
57
|
CVE-2026-11536 |
8.5 | 0.0058 | NET NO UI | IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execu | |
|
57
|
CVE-2026-57315 |
8.5 | 0.0058 | NET NO UI | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versi |