Hunt List
13,139 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-42380 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions. | |
|
80
|
CVE-2025-11708 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Use-after-free in MediaTrackGraphImpl::GetInstance(). This vulnerability was fix | |
|
79
|
CVE-2026-61740 |
9.3 | 0.0051 | NET NO AUTH LOW CX NO UI | LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4 | |
|
79
|
CVE-2026-93866 |
9.2 | 0.0051 | NET NO AUTH LOW CX NO UI | An integer overflow vulnerability in the WebSocket connection handling used by W | |
|
78
|
CVE-2026-87866 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | When built with wolfSSL, curl can successfully validate a pinned public key hash | |
|
78
|
CVE-2026-114139 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9 | |
|
78
|
CVE-2026-49127 |
8.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflo | |
|
78
|
CVE-2026-7821 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0. | |
|
77
|
CVE-2026-111280 |
8.3 | 0.0051 | NET NO AUTH LOW CX NO UI | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7Micro | |
|
76
|
CVE-2026-63764 |
7.7 | 0.0051 | NET NO AUTH LOW CX NO UI | LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request | |
|
75
|
CVE-2023-54227 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix | |
|
75
|
CVE-2026-52193 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows | |
|
75
|
CVE-2026-54427 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote | |
|
75
|
CVE-2026-78066 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple | |
|
75
|
CVE-2026-79704 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | An out-of-bounds read vulnerability exists in the streaming RPC client of Apache | |
|
70
|
CVE-2026-13772 |
9.9 | 0.0051 | NET LOW CX NO UI | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language eng | |
|
69
|
CVE-2026-17671 |
9.6 | 0.0051 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15 | |
|
69
|
CVE-2026-17682 |
9.6 | 0.0051 | NET NO AUTH LOW CX | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remo | |
|
69
|
CVE-2026-17704 |
9.6 | 0.0051 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
69
|
CVE-2026-17717 |
9.6 | 0.0051 | NET NO AUTH LOW CX | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remo | |
|
68
|
CVE-2026-17678 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a re | |
|
68
|
CVE-2026-115912 |
8.8 | 0.0051 | NET LOW CX NO UI | vLLM is an inference and serving engine for large language models. Prior to 0.32 | |
|
67
|
CVE-2026-115642 |
8.3 | 0.0051 | NET LOW CX NO UI | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-T | |
|
65
|
CVE-2026-5988 |
7.4 | 0.0051 | NET LOW CX NO UI | A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function fo | |
|
65
|
CVE-2026-5989 |
7.4 | 0.0051 | NET LOW CX NO UI | A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteS | |
|
65
|
CVE-2026-5990 |
7.4 | 0.0051 | NET LOW CX NO UI | A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerabi | |
|
65
|
CVE-2026-5991 |
7.4 | 0.0051 | NET LOW CX NO UI | A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the f | |
|
65
|
CVE-2026-5992 |
7.4 | 0.0051 | NET LOW CX NO UI | A vulnerability was determined in Tenda F451 1.0.0.7. This affects the function | |
|
65
|
CVE-2026-6121 |
7.4 | 0.0051 | NET LOW CX NO UI | A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is t | |
|
64
|
CVE-2026-59510 |
7.1 | 0.0051 | NET LOW CX NO UI | AIL Framework contains a path traversal vulnerability in its PDF object handling | |
|
59
|
CVE-2026-114492 |
7.0 | 0.0051 | NET LOW CX NO UI | gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows | |
|
59
|
CVE-2026-74031 |
7.0 | 0.0051 | NET LOW CX NO UI | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the de | |
|
56
|
CVE-2026-34332 |
8.0 | 0.0051 | NET LOW CX | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to e | |
|
55
|
CVE-2026-57788 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57789 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57790 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57791 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57792 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57793 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57794 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57795 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57796 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57798 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57799 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57800 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57801 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57802 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57803 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57804 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
55
|
CVE-2026-57805 |
7.5 | 0.0051 | NET NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP |