Hunt List
8,506 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-109774 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | Invalid pointer, undefined behavior in the DOM: Notifications component. This vu | |
|
80
|
CVE-2026-46389 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | UDS Identity Config builds the Keycloak configuration image (realm, plugins, the | |
|
80
|
CVE-2026-113616 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-r | |
|
79
|
CVE-2026-111411 |
9.3 | 0.0034 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
78
|
CVE-2026-50638 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect | |
|
78
|
CVE-2026-44603 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN c | |
|
78
|
CVE-2026-107017 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | Insecure permissions in the ShortcutDispatchActivity component of canvoki versio | |
|
78
|
CVE-2026-107028 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows un | |
|
78
|
CVE-2025-30052 |
8.8 | 0.0034 | NET NO AUTH LOW CX NO UI | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass vi | |
|
78
|
CVE-2026-58102 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds r | |
|
77
|
CVE-2026-5052 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | Vault’s PKI engine’s ACME validation did not reject local targets when issuing h | |
|
77
|
CVE-2026-111419 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | A sensitive information exposure vulnerability exists on the Foxit official webs | |
|
77
|
CVE-2026-55889 |
8.3 | 0.0034 | NET NO AUTH LOW CX NO UI | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, mal | |
|
77
|
CVE-2026-114405 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | Improper validation of array index vulnerability in Velneo vServer. This issue a | |
|
77
|
CVE-2026-115349 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of ser | |
|
77
|
CVE-2026-83407 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-0646 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | A denial-of-service security issue exists within the 1794-AENTR adapter due to i | |
|
77
|
CVE-2026-60235 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
77
|
CVE-2026-60671 |
8.6 | 0.0034 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
77
|
CVE-2026-41680 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | Marked is a markdown parser and compiler. From 18.0.0 to 18.0.1, a critical Deni | |
|
77
|
CVE-2026-6823 |
8.3 | 0.0034 | NET NO AUTH LOW CX NO UI | HKUDS OpenHarness prior to PR #147 remediation contains an insecure default conf | |
|
76
|
CVE-2026-46720 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The | |
|
76
|
CVE-2026-119682 |
7.9 | 0.0034 | NET NO AUTH LOW CX NO UI | An improper access control vulnerability exists in the multi-factor authenticati | |
|
75
|
CVE-2026-33614 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection | |
|
75
|
CVE-2026-33616 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | An unauthenticated remote attacker can exploit an unauthenticated blind SQL Inje | |
|
75
|
CVE-2026-111417 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | A broken access control vulnerability exists in the Foxit official website’s HTM | |
|
75
|
CVE-2026-42365 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | A guessable session cookie vulnerability exists in the Web Interface functionali | |
|
75
|
CVE-2026-65370 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could | |
|
75
|
CVE-2026-37454 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 a | |
|
75
|
CVE-2026-116580 |
7.3 | 0.0034 | NET NO AUTH LOW CX NO UI | Seroval facilitates JavaScript value stringification, including complex structur | |
|
68
|
CVE-2026-17967 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 | |
|
68
|
CVE-2026-19144 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote | |
|
68
|
CVE-2026-19169 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome | |
|
68
|
CVE-2026-7902 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowe | |
|
68
|
CVE-2026-8915 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflo | |
|
68
|
CVE-2026-6299 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a r | |
|
68
|
CVE-2026-6300 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote | |
|
68
|
CVE-2026-6316 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Forms in Google Chrome prior to 147.0.7727.101 allowed a remot | |
|
68
|
CVE-2026-6317 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote | |
|
66
|
CVE-2026-14090 |
8.1 | 0.0034 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in CameraCapture in Google Chrome on | |
|
66
|
CVE-2026-84725 |
8.1 | 0.0034 | NET NO AUTH NO UI | when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplie | |
|
66
|
CVE-2026-48064 |
8.1 | 0.0034 | NET NO AUTH NO UI | pam_usb provides hardware authentication for Linux using ordinary removable medi | |
|
66
|
CVE-2026-25439 |
8.1 | 0.0034 | NET NO AUTH NO UI | Authentication Bypass Using an Alternate Path or Channel vulnerability in Bookne | |
|
65
|
CVE-2026-101736 |
7.4 | 0.0034 | NET NO AUTH NO UI | Vulnerability in the Primavera Unifier product of Oracle Construction and Engine | |
|
65
|
CVE-2026-7466 |
7.7 | 0.0034 | NET NO AUTH LOW CX | AgentFlow contains an arbitrary code execution vulnerability that allows attacke | |
|
64
|
CVE-2026-33533 |
7.1 | 0.0034 | NET NO AUTH LOW CX | Glances is an open-source system cross-platform monitoring tool. Prior to versio | |
|
64
|
CVE-2026-96642 |
7.1 | 0.0034 | NET NO AUTH LOW CX | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in sr | |
|
57
|
CVE-2026-19173 |
8.3 | 0.0034 | NET NO AUTH | Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a r | |
|
55
|
CVE-2026-42790 |
7.6 | 0.0034 | NET NO AUTH | Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_c | |
|
55
|
CVE-2026-98173 |
7.5 | 0.0034 | NET NO AUTH | In the Linux kernel, the following vulnerability has been resolved: smb: client |