Hunt List
8,520 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-44888 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to | |
|
80
|
CVE-2026-32966 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metada | |
|
80
|
CVE-2026-76408 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-76529 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-8362 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when | |
|
80
|
CVE-2026-4370 |
10.0 | 0.0039 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from | |
|
80
|
CVE-2024-25182 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php. | |
|
80
|
CVE-2024-27480 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. | |
|
79
|
CVE-2026-44257 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManag | |
|
79
|
CVE-2026-39494 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-5387 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | The vulnerability, if exploited, could allow an unauthenticated miscreant to per | |
|
78
|
CVE-2026-61436 |
8.8 | 0.0039 | NET NO AUTH LOW CX NO UI | PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail web | |
|
78
|
CVE-2026-65604 |
8.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Skipper contains an incomplete fix for CVE-2026-50197 in which oversized request | |
|
77
|
CVE-2026-0993 |
8.7 | 0.0039 | NET NO AUTH LOW CX NO UI | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vuln | |
|
77
|
CVE-2021-48018 |
8.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentr | |
|
76
|
CVE-2026-45711 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Mailpit is an email testing tool and API for developers. Prior to version 1.30.0 | |
|
75
|
CVE-2026-48774 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions | |
|
75
|
CVE-2026-98479 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: libis | |
|
75
|
CVE-2026-82942 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a re | |
|
75
|
CVE-2026-6772 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions in the Libraries component in NSS. This vulnerabil | |
|
75
|
CVE-2026-42544 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Gran | |
|
75
|
CVE-2026-51606 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | An improper input handling vulnerability in the RTSP service of Tenda CP3 V3.0 ( | |
|
75
|
CVE-2026-62351 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | TDengine is a time-series database optimized for Internet of Things devices. Pri | |
|
75
|
CVE-2026-106113 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacke | |
|
75
|
CVE-2026-118659 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Happy DOM is a JavaScript implementation of a web browser without its graphical | |
|
75
|
CVE-2026-104596 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplem | |
|
75
|
CVE-2026-46265 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: F | |
|
69
|
CVE-2026-46795 |
9.3 | 0.0039 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
69
|
CVE-2026-46805 |
9.3 | 0.0039 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
69
|
CVE-2026-2342 |
9.3 | 0.0039 | NET NO AUTH LOW CX | Improper neutralization of input during web page generation ('cross-site scripti | |
|
69
|
CVE-2026-55743 |
9.4 | 0.0039 | NET NO AUTH LOW CX | The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agen | |
|
68
|
CVE-2026-113255 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078. | |
|
68
|
CVE-2026-20586 |
8.8 | 0.0039 | NET NO AUTH LOW CX | In vdec, there is a possible out of bounds write due to a missing bounds check. | |
|
68
|
CVE-2026-35259 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
67
|
CVE-2026-59109 |
8.7 | 0.0039 | NET NO AUTH LOW CX | SQL injection in the Zalktis accounting application via trading-partner-controll | |
|
67
|
CVE-2026-59179 |
8.3 | 0.0039 | NET NO AUTH LOW CX | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, ` | |
|
66
|
CVE-2026-70684 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
66
|
CVE-2026-70704 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Trading Community product of Oracle E-Business Suite | |
|
66
|
CVE-2026-70744 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
66
|
CVE-2026-70749 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
66
|
CVE-2026-70795 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Applications Platform Engineering product of Oracle | |
|
66
|
CVE-2026-70814 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business | |
|
66
|
CVE-2026-70868 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
66
|
CVE-2026-70924 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middle | |
|
66
|
CVE-2026-71035 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
66
|
CVE-2026-71053 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle | |
|
66
|
CVE-2026-71068 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch | |
|
66
|
CVE-2026-71112 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle | |
|
66
|
CVE-2026-80353 |
8.1 | 0.0039 | NET NO AUTH NO UI | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat | |
|
65
|
CVE-2026-72584 |
7.4 | 0.0039 | NET NO AUTH NO UI | A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15. |