Hunt List
13,132 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-103406 |
9.8 | 0.0052 | NET NO AUTH LOW CX NO UI | An Improper Neutralization of Special Elements used in an OS Command vulnerabili | |
|
80
|
CVE-2026-55572 |
10.0 | 0.0052 | NET NO AUTH LOW CX NO UI | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth | |
|
80
|
CVE-2026-30993 |
9.8 | 0.0052 | NET NO AUTH LOW CX NO UI | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE | |
|
80
|
CVE-2023-0745 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The High Availability functionality of Yugabyte An | |
|
80
|
CVE-2026-16407 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Service Workers component. This vulnerability was | |
|
80
|
CVE-2026-99154 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: libis | |
|
80
|
CVE-2026-74406 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix | |
|
80
|
CVE-2026-89652 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: bound | |
|
80
|
CVE-2026-90037 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFSD: Preve | |
|
80
|
CVE-2024-51311 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51313 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51312 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51314 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
79
|
CVE-2026-64622 |
9.3 | 0.0052 | NET NO AUTH LOW CX NO UI | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the co | |
|
78
|
CVE-2026-6918 |
8.7 | 0.0052 | NET NO AUTH LOW CX NO UI | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker ca | |
|
78
|
CVE-2026-16762 |
8.7 | 0.0052 | NET NO AUTH LOW CX NO UI | An attacker able to supply a crafted XML document to an application using QXmlSt | |
|
78
|
CVE-2026-89650 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: bound | |
|
78
|
CVE-2026-19424 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Refe | |
|
78
|
CVE-2026-73622 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | GitPython before 3.1.55 fails to disable environment variable expansion in Remot | |
|
75
|
CVE-2026-15574 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | A flaw was found in the vllm-orchestrator-gateway component. The system's produc | |
|
75
|
CVE-2026-16376 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixe | |
|
75
|
CVE-2026-16409 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Invalid pointer in the Security: PSM component. This vulnerability was fixed in | |
|
75
|
CVE-2026-47667 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_ | |
|
75
|
CVE-2026-41135 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source | |
|
75
|
CVE-2026-12691 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Vimesoft Inc. Ente | |
|
75
|
CVE-2026-15322 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to | |
|
75
|
CVE-2026-10686 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrem | |
|
75
|
CVE-2026-52481 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attack | |
|
75
|
CVE-2026-33257 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | An attacker can send a web request that causes unlimited memory allocation in th | |
|
75
|
CVE-2026-44240 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable | |
|
75
|
CVE-2026-88041 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information | |
|
68
|
CVE-2026-113405 |
8.7 | 0.0052 | NET LOW CX NO UI | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenti | |
|
68
|
CVE-2026-113406 |
8.7 | 0.0052 | NET LOW CX NO UI | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenti | |
|
68
|
CVE-2026-112994 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113147 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-41957 |
8.7 | 0.0051 | NET LOW CX NO UI | An authenticated remote code execution vulnerability through undisclosed vectors | |
|
67
|
CVE-2026-50338 |
8.2 | 0.0052 | NET NO UI | 1 PoC | Improper authentication in Azure Spring Apps allows an authorized attacker to el |
|
66
|
CVE-2026-70465 |
8.1 | 0.0052 | NET NO AUTH NO UI | A buffer copy without checking size of input ('classic buffer overflow') vulnera | |
|
66
|
CVE-2026-99064 |
8.1 | 0.0052 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: cipso: adju | |
|
66
|
CVE-2026-34783 |
8.1 | 0.0051 | NET NO AUTH LOW CX | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4 | |
|
66
|
CVE-2026-71407 |
8.1 | 0.0051 | NET NO AUTH NO UI | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet | |
|
65
|
CVE-2026-7470 |
7.4 | 0.0052 | NET LOW CX NO UI | A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected | |
|
65
|
CVE-2026-96187 |
7.4 | 0.0051 | NET NO AUTH LOW CX | Access of resource using incompatible type ('type confusion') in Microsoft Edge | |
|
64
|
CVE-2026-70472 |
7.1 | 0.0052 | NET LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
62
|
CVE-2024-56837 |
8.6 | 0.0052 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.1 | |
|
62
|
CVE-2026-32997 |
8.6 | 0.0051 | NET LOW CX NO UI | A vulnerability allowing an authenticated user with the Backup Administrator rol | |
|
60
|
CVE-2026-65984 |
7.5 | 0.0052 | NET LOW CX NO UI | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3 | |
|
60
|
CVE-2026-101694 |
7.2 | 0.0051 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
59
|
CVE-2026-45261 |
9.3 | 0.0052 | NET LOW CX | GitButler is a modern Git-based version control interface for AI-powered workflo | |
|
55
|
CVE-2026-111255 |
7.5 | 0.0052 | NET NO UI | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin |