Hunt List
12,983 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-57811 |
10.0 | 0.0056 | NET NO AUTH LOW CX NO UI | Improper Control of Generation of Code ('Code Injection') vulnerability in Realt | |
|
80
|
CVE-2026-56032 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions. | |
|
80
|
CVE-2026-56057 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. | |
|
80
|
CVE-2026-57621 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions. | |
|
80
|
CVE-2026-57677 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce | |
|
80
|
CVE-2026-14535 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImports | |
|
80
|
CVE-2026-9726 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
80
|
CVE-2026-12535 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
80
|
CVE-2026-11913 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | vulnerability in Drupal Mother May I allows . This issue affects Mother May I ve | |
|
80
|
CVE-2026-57724 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Ob | |
|
80
|
CVE-2026-57744 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensio | |
|
80
|
CVE-2026-57770 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography | |
|
80
|
CVE-2026-59518 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist | |
|
80
|
CVE-2026-59544 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions | |
|
80
|
CVE-2026-17561 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Improper Control of Generation of Code ('Code Injection') vulnerability in Innot | |
|
80
|
CVE-2026-28139 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions. | |
|
80
|
CVE-2026-65552 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions. | |
|
80
|
CVE-2026-65556 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1 | |
|
80
|
CVE-2026-65571 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. | |
|
80
|
CVE-2026-65572 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. | |
|
80
|
CVE-2026-65573 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. | |
|
80
|
CVE-2026-65574 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Abogado <= 1.18 versions. | |
|
80
|
CVE-2026-65575 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. | |
|
80
|
CVE-2026-65576 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. | |
|
80
|
CVE-2026-65577 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. | |
|
80
|
CVE-2026-65578 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Agora <= 1.9 versions. | |
|
80
|
CVE-2026-65579 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. | |
|
80
|
CVE-2026-65581 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. | |
|
80
|
CVE-2026-28149 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions. | |
|
80
|
CVE-2026-32470 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. | |
|
80
|
CVE-2026-73341 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. | |
|
80
|
CVE-2026-73366 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions. | |
|
80
|
CVE-2026-73376 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versi | |
|
80
|
CVE-2026-73380 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions. | |
|
80
|
CVE-2026-73397 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions. | |
|
80
|
CVE-2026-32563 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for Wor | |
|
80
|
CVE-2026-42869 |
10.0 | 0.0056 | NET NO AUTH LOW CX NO UI | SOCFortress CoPilot focuses on providing a single pane of glass for all your sec | |
|
78
|
CVE-2026-16926 |
9.1 | 0.0056 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to o | |
|
78
|
CVE-2026-49357 |
8.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Line Desktop MCP is a project that, while unaffiliated with the official line-bo | |
|
78
|
CVE-2026-49048 |
8.7 | 0.0056 | NET NO AUTH LOW CX NO UI | The Joomla extension JoomCCK exposes a front-end controller task, that builds tw | |
|
78
|
CVE-2026-64319 |
9.1 | 0.0056 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: | |
|
78
|
CVE-2026-14809 |
8.7 | 0.0056 | NET NO AUTH LOW CX NO UI | Prog Management System developed by PROG MIS has a SQL Injection vulnerability, | |
|
77
|
CVE-2023-53705 |
8.2 | 0.0056 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix o | |
|
77
|
CVE-2026-97200 |
8.2 | 0.0056 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in hackney_co | |
|
70
|
CVE-2026-44747 |
9.9 | 0.0056 | NET LOW CX NO UI | SAP NetWeaver Application Server ABAP allows an authenticated attacker to levera | |
|
68
|
CVE-2026-54232 |
8.8 | 0.0056 | NET NO AUTH LOW CX | vLLM is an inference and serving engine for large language models (LLMs). Prior | |
|
65
|
CVE-2026-3833 |
7.4 | 0.0056 | NET NO AUTH NO UI | A flaw was found in gnutls. This vulnerability occurs because gnutls performs ca | |
|
64
|
CVE-2026-58451 |
7.1 | 0.0056 | NET LOW CX NO UI | Horde IMP before 7.0.1 contains a path traversal vulnerability in lib/Compose.ph | |
|
64
|
CVE-2026-85171 |
7.1 | 0.0056 | NET LOW CX NO UI | n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerabi | |
|
58
|
CVE-2026-26149 |
9.0 | 0.0056 | NET LOW CX | Improper neutralization of escape, meta, or control sequences in Microsoft Power |