Hunt List
8,520 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-27053 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions. | |
|
80
|
CVE-2026-41120 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance | |
|
80
|
CVE-2026-61992 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | |
|
79
|
CVE-2026-47174 |
9.5 | 0.0039 | NET NO AUTH LOW CX NO UI | In Duck Site before version 1.0.1, the repository has a deploy workflow that run | |
|
79
|
CVE-2026-44125 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorizati | |
|
79
|
CVE-2026-74254 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The | |
|
79
|
CVE-2026-76602 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in F | |
|
79
|
CVE-2026-77994 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < | |
|
79
|
CVE-2026-102788 |
9.3 | 0.0039 | NET NO AUTH LOW CX NO UI | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20 | |
|
78
|
CVE-2026-65876 |
9.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Bu | |
|
78
|
CVE-2026-61845 |
8.9 | 0.0039 | NET NO AUTH LOW CX NO UI | Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 sp | |
|
78
|
CVE-2026-61684 |
8.8 | 0.0039 | NET NO AUTH LOW CX NO UI | FastGPT is a knowledge-based AI application platform. In 4.15.0-beta4, FastGPT p | |
|
78
|
CVE-2026-9006 |
9.1 | 0.0039 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side reque | |
|
77
|
CVE-2026-58227 |
8.7 | 0.0039 | NET NO AUTH LOW CX NO UI | The Erlang/OTP ssl application does not detect cycles when reconstructing an inc | |
|
77
|
CVE-2026-116543 |
8.7 | 0.0039 | NET NO AUTH LOW CX NO UI | Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in | |
|
77
|
CVE-2026-19678 |
8.7 | 0.0039 | NET NO AUTH LOW CX NO UI | A server-side request forgery (SSRF) vulnerability in the unauthenticated form s | |
|
77
|
CVE-2026-59204 |
8.7 | 0.0039 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jp | |
|
77
|
CVE-2026-71255 |
8.6 | 0.0039 | NET NO AUTH LOW CX NO UI | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client- | |
|
76
|
CVE-2023-53711 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a | |
|
76
|
CVE-2026-42353 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | i18next-http-middleware is a middleware to be used with Node.js web frameworks l | |
|
76
|
CVE-2026-94482 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Next.js is a React framework for building full-stack web applications. From 13.0 | |
|
75
|
CVE-2026-33382 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Several Grafana API endpoints, some of them unauthenticated, do not limit the si | |
|
75
|
CVE-2026-83404 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec | |
|
75
|
CVE-2026-111181 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | body-parser is body parsing middleware for Node.js and Express. In versions befo | |
|
75
|
CVE-2026-40180 |
7.7 | 0.0039 | NET NO AUTH LOW CX NO UI | Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients | |
|
75
|
CVE-2026-28954 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | A file quarantine bypass was addressed with additional checks. This issue is fix | |
|
75
|
CVE-2026-44594 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | esm.sh is a no-build content delivery network (CDN) for web development. In 137 | |
|
75
|
CVE-2026-63683 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular | |
|
75
|
CVE-2026-70377 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output | |
|
75
|
CVE-2026-110747 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ProtobufParser._readStringKey() reads the length prefix of a protobuf map entry' | |
|
75
|
CVE-2026-49068 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. | |
|
75
|
CVE-2026-45357 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure Ja | |
|
75
|
CVE-2026-59199 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordin | |
|
75
|
CVE-2026-59205 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsT | |
|
75
|
CVE-2026-59200 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream | |
|
75
|
CVE-2026-106110 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Grou | |
|
75
|
CVE-2026-106112 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversio | |
|
75
|
CVE-2026-106115 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Grou | |
|
75
|
CVE-2026-106117 |
7.5 | 0.0039 | NET NO AUTH LOW CX NO UI | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TI | |
|
69
|
CVE-2026-45374 |
9.6 | 0.0039 | NET NO AUTH LOW CX | CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, the ta | |
|
68
|
CVE-2026-44792 |
8.9 | 0.0039 | NET NO AUTH LOW CX | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, a | |
|
67
|
CVE-2026-59855 |
8.6 | 0.0039 | NET NO AUTH LOW CX | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, A | |
|
67
|
CVE-2026-114125 |
8.6 | 0.0039 | NET NO AUTH LOW CX | Storybook is a frontend workshop for building user interface components and page | |
|
66
|
CVE-2026-118665 |
8.2 | 0.0039 | NET NO AUTH NO UI | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL sc | |
|
66
|
CVE-2026-98454 |
8.1 | 0.0039 | NET NO AUTH LOW CX | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
65
|
CVE-2026-48084 |
7.4 | 0.0039 | NET NO AUTH NO UI | OpenReception's appointment booking software provides an end-to-end encrypted ap | |
|
65
|
CVE-2026-47058 |
7.4 | 0.0039 | NET NO AUTH NO UI | Vulnerability in Oracle Java SE (component: Scripting). Supported versions that | |
|
65
|
CVE-2026-59546 |
7.4 | 0.0039 | NET NO AUTH NO UI | Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. | |
|
55
|
CVE-2026-41180 |
7.5 | 0.0039 | NET NO AUTH | PsiTransfer is an open source, self-hosted file sharing solution. Prior to versi | |
|
55
|
CVE-2026-13925 |
7.5 | 0.0039 | NET NO AUTH | Inappropriate implementation in Downloads in Google Chrome on Windows prior to 1 |