Hunt List
13,098 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-51599 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | An insufficient input validation vulnerability in the RTSP service of MERCURY MI | |
|
80
|
CVE-2026-92559 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attack | |
|
80
|
CVE-2026-53412 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client fo | |
|
80
|
CVE-2026-79858 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AO | |
|
80
|
CVE-2026-15982 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Too | |
|
80
|
CVE-2025-60355 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template | |
|
80
|
CVE-2026-63808 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: exfat: fix | |
|
79
|
CVE-2026-41586 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framew | |
|
79
|
CVE-2026-115812 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Relative path traversal during model archive extraction in Amazon Web Services M | |
|
79
|
CVE-2025-40771 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) | |
|
79
|
CVE-2026-55445 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Qinglong is a timed task management platform supporting Python3, JavaScript, She | |
|
79
|
CVE-2026-114108 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vul | |
|
78
|
CVE-2026-75859 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | CodeWhale versions before 0.8.64 fail to validate file paths in the project conf | |
|
78
|
CVE-2026-75914 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | CodeWhale versions before 0.8.64 contain a path traversal vulnerability in the i | |
|
78
|
CVE-2026-72575 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | An improper authorization vulnerability in daptin through v0.12.34 allows unauth | |
|
78
|
CVE-2026-112399 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate | |
|
78
|
CVE-2026-18670 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
78
|
CVE-2025-68809 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: | |
|
78
|
CVE-2012-20002 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path trav | |
|
78
|
CVE-2016-20100 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path trav | |
|
77
|
CVE-2026-54650 |
8.6 | 0.0053 | NET NO AUTH LOW CX NO UI | openhole exposes localhost to the internet in one command. In 0.1.1 and earlier, | |
|
77
|
CVE-2026-15583 |
8.6 | 0.0053 | NET NO AUTH LOW CX NO UI | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote at | |
|
75
|
CVE-2026-28969 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | A use after free issue was addressed with improved memory management. This issue | |
|
75
|
CVE-2026-55760 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | Handlebars.java provides logic-less and semantic Mustache templates with Java. P | |
|
75
|
CVE-2026-75887 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | A flaw was found in the OpenShift console. An unauthenticated attacker can explo | |
|
75
|
CVE-2026-24146 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server contains a vulnerability where insufficient input | |
|
75
|
CVE-2026-112365 |
7.2 | 0.0053 | NET NO AUTH LOW CX NO UI | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hi | |
|
70
|
CVE-2026-13435 |
9.9 | 0.0053 | NET LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vuln | |
|
70
|
CVE-2026-120308 |
9.9 | 0.0053 | NET LOW CX NO UI | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task | |
|
69
|
CVE-2026-44790 |
9.4 | 0.0053 | NET LOW CX NO UI | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, a | |
|
69
|
CVE-2026-44789 |
9.4 | 0.0053 | NET LOW CX NO UI | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, a | |
|
69
|
CVE-2026-62834 |
9.3 | 0.0053 | NET NO AUTH LOW CX | Improper verification of cryptographic signature in Azure Data Factory allows an | |
|
68
|
CVE-2026-40349 |
8.8 | 0.0053 | NET LOW CX NO UI | Movary is a self hosted web app to track and rate a user's watched movies. Prior | |
|
68
|
CVE-2026-15067 |
8.8 | 0.0053 | NET LOW CX NO UI | Snowflake Terraform Provider versions prior to 2.18.0 contain several security v | |
|
68
|
CVE-2026-8056 |
8.8 | 0.0053 | NET LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to override com | |
|
68
|
CVE-2026-16800 |
8.8 | 0.0053 | NET LOW CX NO UI | Improper control of generation of code ('Code Injection') in the schedule featur | |
|
68
|
CVE-2026-16801 |
8.8 | 0.0053 | NET LOW CX NO UI | Improper control of generation of code ('Code Injection') in the variables featu | |
|
68
|
CVE-2026-18258 |
8.8 | 0.0053 | NET LOW CX NO UI | Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and | |
|
68
|
CVE-2026-113103 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113163 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-113230 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 all | |
|
67
|
CVE-2026-55665 |
8.5 | 0.0053 | NET NO AUTH LOW CX | Grist is spreadsheet software using Python as its formula language. Prior to 1.7 | |
|
66
|
CVE-2026-18147 |
8.1 | 0.0053 | NET NO AUTH LOW CX | A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a | |
|
66
|
CVE-2023-35947 |
8.1 | 0.0053 | NET NO AUTH NO UI | Gradle is a build tool with a focus on build automation and support for multi-la | |
|
66
|
CVE-2026-83947 |
7.7 | 0.0053 | NET LOW CX NO UI | Missing authorization in Azure Event Grid allows an authorized attacker to perfo | |
|
65
|
CVE-2026-6137 |
7.4 | 0.0053 | NET LOW CX NO UI | A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected elem | |
|
64
|
CVE-2024-58380 |
7.1 | 0.0053 | NET LOW CX NO UI | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability i | |
|
64
|
CVE-2026-69244 |
7.1 | 0.0053 | NET NO AUTH LOW CX | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | |
|
62
|
CVE-2026-73670 |
8.6 | 0.0053 | NET LOW CX NO UI | A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 th | |
|
59
|
CVE-2026-54527 |
9.3 | 0.0053 | NET LOW CX | JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, t |