Hunt List
13,097 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-1114 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | In parisneo/lollms version 2.1.0, the application's session management is vulner | |
|
80
|
CVE-2026-6023 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the R | |
|
80
|
CVE-2026-9711 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full | |
|
80
|
CVE-2026-61564 |
10.0 | 0.0054 | NET NO AUTH LOW CX NO UI | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installe | |
|
80
|
CVE-2026-101809 |
10.0 | 0.0054 | NET NO AUTH LOW CX NO UI | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor | |
|
79
|
CVE-2026-39920 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | BridgeHead FileStore versions prior to 24A (released in early 2024) expose the A | |
|
79
|
CVE-2026-19001 |
9.5 | 0.0054 | NET NO AUTH LOW CX NO UI | The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-siz | |
|
79
|
CVE-2025-6519 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY | |
|
78
|
CVE-2026-59139 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read v | |
|
78
|
CVE-2026-59140 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds rea | |
|
78
|
CVE-2026-59141 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds rea | |
|
78
|
CVE-2026-59142 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read | |
|
78
|
CVE-2026-59145 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read v | |
|
77
|
CVE-2026-27400 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. | |
|
77
|
CVE-2026-68791 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Incorrect authorization in Azure Machine Learning allows an unauthorized attacke | |
|
77
|
CVE-2026-78501 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in a command ('command injectio | |
|
75
|
CVE-2026-28848 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A buffer overflow was addressed with improved bounds checking. This issue is fix | |
|
75
|
CVE-2026-37453 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 a | |
|
75
|
CVE-2026-67867 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker t | |
|
75
|
CVE-2026-73197 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this | |
|
75
|
CVE-2026-73198 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vu | |
|
75
|
CVE-2026-115778 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Twisted is an event-based framework for internet applications, supporting Python | |
|
75
|
CVE-2026-20346 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A vulnerability in the PDF file format parser of ClamAV could allow an unauthent | |
|
70
|
CVE-2026-62420 |
9.9 | 0.0054 | NET LOW CX NO UI | An authorization bypass vulnerability in LXD allows an authenticated attacker to | |
|
70
|
CVE-2026-63300 |
9.9 | 0.0054 | NET LOW CX NO UI | An improper validation vulnerability in the instancePostMigration function in lx | |
|
68
|
CVE-2026-26944 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release ver | |
|
68
|
CVE-2026-113080 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-112623 |
8.8 | 0.0054 | NET NO AUTH LOW CX | A use-after-free issue was addressed with improved memory management. This issue | |
|
68
|
CVE-2026-112651 |
8.8 | 0.0054 | NET NO AUTH LOW CX | A use-after-free issue was addressed with improved memory management. This issue | |
|
68
|
CVE-2026-16096 |
8.7 | 0.0054 | NET LOW CX NO UI | A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Th | |
|
67
|
CVE-2026-81378 |
8.2 | 0.0054 | NET NO AUTH LOW CX | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to | |
|
67
|
CVE-2026-81379 |
8.2 | 0.0054 | NET NO AUTH LOW CX | Not failing securely ('failing open') in Visual Studio Code allows an unauthoriz | |
|
67
|
CVE-2026-17095 |
8.3 | 0.0054 | NET LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypa | |
|
66
|
CVE-2026-64665 |
8.1 | 0.0054 | NET NO AUTH NO UI | Statamic is a Laravel and Git powered content management system (CMS). Prior to | |
|
66
|
CVE-2025-40947 |
7.7 | 0.0054 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.1 | |
|
65
|
CVE-2026-6122 |
7.4 | 0.0054 | NET LOW CX NO UI | A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is | |
|
65
|
CVE-2026-6133 |
7.4 | 0.0054 | NET LOW CX NO UI | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. This affects th | |
|
65
|
CVE-2026-6136 |
7.4 | 0.0054 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Imp | |
|
64
|
CVE-2026-58296 |
7.1 | 0.0054 | NET NO AUTH LOW CX | Exposure of private personal information to an unauthorized actor in Microsoft E | |
|
64
|
CVE-2026-58297 |
7.1 | 0.0054 | NET NO AUTH LOW CX | Exposure of private personal information to an unauthorized actor in Microsoft E | |
|
64
|
CVE-2026-57871 |
7.1 | 0.0054 | NET LOW CX NO UI | Relative path traversal vulnerability in MicroRealEstate file upload functionali | |
|
60
|
CVE-2026-71232 |
7.2 | 0.0054 | NET LOW CX NO UI | MacCMS10's admin template editor (application/admin/controller/Template.php) blo | |
|
60
|
CVE-2026-12005 |
7.2 | 0.0054 | NET LOW CX NO UI | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access | |
|
60
|
CVE-2026-59521 |
7.2 | 0.0054 | NET LOW CX NO UI | Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimo | |
|
60
|
CVE-2026-65497 |
7.2 | 0.0054 | NET LOW CX NO UI | Administrator PHP Object Injection in Complianz <= 7.5.0 versions. | |
|
60
|
CVE-2026-65549 |
7.2 | 0.0054 | NET LOW CX NO UI | Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions. | |
|
60
|
CVE-2026-27380 |
7.2 | 0.0054 | NET LOW CX NO UI | Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions. | |
|
60
|
CVE-2026-66620 |
7.2 | 0.0054 | NET LOW CX NO UI | Editor PHP Object Injection in OptionTree <= 2.7.3 versions. | |
|
59
|
CVE-2026-55843 |
7.0 | 0.0054 | NET LOW CX NO UI | Snipe-IT is an IT asset/license management system. Prior to 8.6.0, UsersControll | |
|
55
|
CVE-2026-96185 |
7.5 | 0.0054 | NET NO UI | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized at |