Hunt List
12,929 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-64703 |
9.8 | 0.0057 | NET NO AUTH LOW CX NO UI | A use after free issue was addressed with improved memory management. This issue | |
|
80
|
CVE-2026-59562 |
9.8 | 0.0057 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Apache IoTDB. T | |
|
78
|
CVE-2026-6947 |
8.7 | 0.0057 | NET NO AUTH LOW CX NO UI | DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypa | |
|
78
|
CVE-2026-54722 |
8.7 | 0.0057 | NET NO AUTH LOW CX NO UI | DSSRF is a Node.js library that provides a wide range of utilities and advanced | |
|
78
|
CVE-2026-11373 |
9.1 | 0.0057 | NET NO AUTH LOW CX NO UI | Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. | |
|
78
|
CVE-2026-72320 |
9.1 | 0.0057 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: netfilter: | |
|
78
|
CVE-2026-55471 |
8.7 | 0.0057 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
77
|
CVE-2026-13577 |
8.2 | 0.0057 | NET NO AUTH LOW CX NO UI | Dancer2 versions before 2.2.0 for Perl generate insecure session ids when requir | |
|
76
|
CVE-2026-54204 |
7.7 | 0.0057 | NET NO AUTH LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox 's search functionality accepts a “path | |
|
75
|
CVE-2026-58064 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | The Redis protocol implementation in Apache bRPC allowed inline command parsing | |
|
75
|
CVE-2026-61916 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache | |
|
75
|
CVE-2026-74755 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0 | |
|
75
|
CVE-2026-80463 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | Unbounded memory accumulation in the stream message reassembly path of Apache bR | |
|
75
|
CVE-2026-19667 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | If an attacker-controlled authoritative server can produce a negative answer tha | |
|
68
|
CVE-2026-15483 |
8.7 | 0.0057 | NET LOW CX NO UI | A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impac | |
|
68
|
CVE-2026-73293 |
8.8 | 0.0057 | NET LOW CX NO UI | Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and | |
|
68
|
CVE-2026-50398 |
8.8 | 0.0057 | NET LOW CX NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
68
|
CVE-2026-58608 |
8.8 | 0.0057 | NET LOW CX NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
67
|
CVE-2026-49248 |
8.3 | 0.0057 | NET LOW CX NO UI | OneDev is a Git server with CI/CD, kanban, and packages. In versions 15.0.6 and | |
|
64
|
CVE-2026-14904 |
7.1 | 0.0057 | NET LOW CX NO UI | AWS Research and Engineering Studio (RES) is an open-source solution that enable | |
|
64
|
CVE-2026-18192 |
7.1 | 0.0057 | NET LOW CX NO UI | VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allo | |
|
63
|
CVE-2026-58409 |
9.1 | 0.0057 | NET LOW CX NO UI | ChurchCRM is an open-source church management system. Prior to version 7.4.0, an | |
|
54
|
CVE-2026-69451 |
7.1 | 0.0057 | NET | 1 PoC | Use after free in Windows Management Instrumentation allows an authorized attack |
|
44
|
CVE-2026-69340 |
7.1 | 0.0057 | NET | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev | |
|
44
|
CVE-2026-69357 |
7.1 | 0.0057 | NET | Use after free in Windows NDIS allows an authorized attacker to elevate privileg | |
|
44
|
CVE-2026-69358 |
7.1 | 0.0057 | NET | Use of uninitialized resource in Remote Desktop Client allows an authorized atta | |
|
44
|
CVE-2026-69396 |
7.1 | 0.0057 | NET | Use after free in Windows NDIS allows an authorized attacker to elevate privileg | |
|
44
|
CVE-2026-69460 |
7.1 | 0.0057 | NET | Use after free in Windows Modern Device Management (MDM) allows an authorized at | |
|
44
|
CVE-2026-69536 |
7.1 | 0.0057 | NET | Use after free in Windows Remote Desktop Services allows an authorized attacker | |
|
44
|
CVE-2026-69597 |
7.1 | 0.0057 | NET | Use after free in Windows HTTP.sys allows an authorized attacker to elevate priv | |
|
44
|
CVE-2026-69602 |
7.1 | 0.0057 | NET | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to | |
|
44
|
CVE-2026-69688 |
7.1 | 0.0057 | NET | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an aut | |
|
44
|
CVE-2026-69706 |
7.1 | 0.0057 | NET | Use after free in Windows Win32K allows an authorized attacker to elevate privil | |
|
44
|
CVE-2026-69761 |
7.1 | 0.0057 | NET | Use after free in Windows TCP/IP allows an authorized attacker to elevate privil | |
|
44
|
CVE-2026-68835 |
7.1 | 0.0057 | NET | Use after free in Windows Print Spooler Components allows an authorized attacker | |
|
44
|
CVE-2026-68846 |
7.1 | 0.0057 | NET | Use after free in Windows Kernel allows an authorized attacker to elevate privil | |
|
44
|
CVE-2026-68889 |
7.1 | 0.0057 | NET | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack | |
|
44
|
CVE-2026-68893 |
7.1 | 0.0057 | NET | Use after free in Windows Remote Desktop Licensing Service allows an authorized | |
|
44
|
CVE-2026-69272 |
7.1 | 0.0057 | NET | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack | |
|
44
|
CVE-2026-69274 |
7.1 | 0.0057 | NET | Use after free in Windows Win32K allows an authorized attacker to elevate privil | |
|
44
|
CVE-2026-69296 |
7.1 | 0.0057 | NET | Use after free in Windows Device Association Service allows an authorized attack | |
|
44
|
CVE-2026-69305 |
7.1 | 0.0057 | NET | Use after free in Microsoft Windows Search Component allows an authorized attack | |
|
44
|
CVE-2026-69313 |
7.1 | 0.0057 | NET | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack | |
|
44
|
CVE-2026-69314 |
7.1 | 0.0057 | NET | Use after free in Windows Device Association Broker service allows an authorized | |
|
44
|
CVE-2026-69336 |
7.1 | 0.0057 | NET | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack | |
|
44
|
CVE-2026-69337 |
7.1 | 0.0057 | NET | Double free in Windows Registry allows an authorized attacker to elevate privile | |
|
44
|
CVE-2026-69338 |
7.1 | 0.0057 | NET | Use after free in Remote Desktop Gateway Service allows an authorized attacker t | |
|
44
|
CVE-2026-69366 |
7.1 | 0.0057 | NET | Use after free in Windows Kernel allows an authorized attacker to elevate privil | |
|
44
|
CVE-2026-69757 |
7.1 | 0.0057 | NET | Use after free in Windows TCP/IP allows an authorized attacker to elevate privil | |
|
44
|
CVE-2026-69775 |
7.1 | 0.0057 | NET | Use after free in Windows DWM Core Library allows an authorized attacker to elev |