Hunt List
8,534 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-64136 |
9.8 | 0.0041 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
80
|
CVE-2026-10577 |
10.0 | 0.0041 | NET NO AUTH LOW CX NO UI | A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected | |
|
80
|
CVE-2026-76607 |
10.0 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabri | |
|
80
|
CVE-2026-77995 |
10.0 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAu | |
|
79
|
CVE-2026-55666 |
9.3 | 0.0041 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
79
|
CVE-2026-25775 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | A vulnerability in SenseLive X3050’s remote management service allows firmware r | |
|
78
|
CVE-2026-91341 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl | |
|
78
|
CVE-2026-27851 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | When safe filter is used with variable expansion, all following pipelines on the | |
|
78
|
CVE-2026-13449 |
9.1 | 0.0041 | NET NO AUTH LOW CX NO UI | IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable | |
|
78
|
CVE-2026-13603 |
9.0 | 0.0041 | NET NO AUTH LOW CX NO UI | The payment integration pretix-oppwa provides support for the payment providers | |
|
78
|
CVE-2026-69078 |
8.8 | 0.0041 | NET NO AUTH LOW CX NO UI | CTI-Transmute is affected by a server-side request forgery vulnerability in the | |
|
78
|
CVE-2026-46809 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
78
|
CVE-2026-46930 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries pr | |
|
78
|
CVE-2026-46949 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Busi | |
|
77
|
CVE-2024-58276 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keywor | |
|
77
|
CVE-2026-52877 |
8.3 | 0.0041 | NET NO AUTH LOW CX NO UI | Streambert is a cross-platform Electron Desktop App to stream and download video | |
|
77
|
CVE-2026-60030 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - themexpert.com - Broken Access Control for media management i | |
|
77
|
CVE-2026-47662 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Pathling is a set of tools that make it easier to use FHIR and clinical terminol | |
|
77
|
CVE-2026-47663 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Pathling is a set of tools that make it easier to use FHIR and clinical terminol | |
|
77
|
CVE-2026-73160 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_m | |
|
77
|
CVE-2026-76596 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doem | |
|
77
|
CVE-2026-76599 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Unauthenticated database table list and table- | |
|
77
|
CVE-2026-67425 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior | |
|
77
|
CVE-2026-73247 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, K | |
|
77
|
CVE-2026-33445 |
8.7 | 0.0040 | NET NO AUTH LOW CX NO UI | CVE-2026-33445 is a memory management vulnerability in Secure Access servers pri | |
|
77
|
CVE-2026-114063 |
8.7 | 0.0040 | NET NO AUTH LOW CX NO UI | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vul | |
|
77
|
CVE-2026-118660 |
8.6 | 0.0040 | NET NO AUTH LOW CX NO UI | Happy DOM is a JavaScript implementation of a web browser without its graphical | |
|
76
|
CVE-2026-33794 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | An Improper Check for Unusual or Exceptional Conditions vulnerability in the a | |
|
76
|
CVE-2026-57022 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Pac | |
|
76
|
CVE-2026-68118 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: tcp: challe | |
|
75
|
CVE-2026-34839 |
7.7 | 0.0041 | NET NO AUTH LOW CX NO UI | Glances is an open-source system cross-platform monitoring tool. Prior to versio | |
|
75
|
CVE-2026-28974 |
7.5 | 0.0041 | NET NO AUTH LOW CX NO UI | This issue was addressed with improved checks to prevent unauthorized actions. T | |
|
75
|
CVE-2026-3323 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | An unsecured configuration interface on affected devices allows unauthenticated | |
|
75
|
CVE-2026-48497 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | Envoy is an open source edge and service proxy designed for cloud-native applica | |
|
68
|
CVE-2026-16372 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Privilege escalation in the DOM: Content Processes component. This vulnerability | |
|
68
|
CVE-2026-112995 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113009 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113141 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113146 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 all | |
|
68
|
CVE-2026-113220 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-113227 |
8.8 | 0.0041 | NET NO AUTH LOW CX | Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
67
|
CVE-2026-34430 |
8.6 | 0.0041 | NET NO AUTH LOW CX | ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vul | |
|
66
|
CVE-2026-12327 |
8.1 | 0.0041 | NET NO AUTH NO UI | Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefo | |
|
66
|
CVE-2026-35289 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle Peop | |
|
66
|
CVE-2026-101390 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-101411 |
8.1 | 0.0041 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-114724 |
8.1 | 0.0041 | NET NO AUTH NO UI | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object inject | |
|
66
|
CVE-2026-42411 |
8.1 | 0.0040 | NET NO AUTH NO UI | Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versio | |
|
66
|
CVE-2026-57113 |
8.1 | 0.0040 | NET NO AUTH LOW CX | PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4. | |
|
65
|
CVE-2026-103314 |
7.4 | 0.0040 | NET NO AUTH NO UI | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Th |