Hunt List
8,503 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-17617 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side | |
|
80
|
CVE-2026-86397 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
79
|
CVE-2026-41064 |
9.3 | 0.0034 | NET NO AUTH LOW CX NO UI | WWBN AVideo is an open source video platform. In versions up to and including 29 | |
|
79
|
CVE-2026-59507 |
9.3 | 0.0034 | NET NO AUTH LOW CX NO UI | : Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauth | |
|
78
|
CVE-2026-93909 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnera | |
|
77
|
CVE-2026-46366 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the ge | |
|
77
|
CVE-2026-55826 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | The GTM Server Side plugin by stape.io implements server-side tracking on WordPr | |
|
77
|
CVE-2026-119655 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability i | |
|
77
|
CVE-2026-119656 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vu | |
|
77
|
CVE-2025-52547 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call | |
|
77
|
CVE-2026-6903 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | The LabOne Web Server, backing the LabOne User Interface, contains insufficient | |
|
77
|
CVE-2026-102479 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], th | |
|
76
|
CVE-2026-34531 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask ro | |
|
76
|
CVE-2026-59096 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.w | |
|
76
|
CVE-2026-45017 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Python Liquid is a Python engine for the Liquid template language. Prior to 2.2. | |
|
76
|
CVE-2026-8377 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. | |
|
76
|
CVE-2026-14996 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related | |
|
76
|
CVE-2026-12984 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 all | |
|
76
|
CVE-2026-59501 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | : Improper Access Control vulnerability in Priority Portal Generator addon to Pr | |
|
75
|
CVE-2026-34290 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
75
|
CVE-2026-44601 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a | |
|
75
|
CVE-2026-8359 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | When processing a request with a URL path starting with /status or /sysinfo, WOS | |
|
75
|
CVE-2026-8360 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DL | |
|
75
|
CVE-2026-67973 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a | |
|
75
|
CVE-2026-59893 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_R | |
|
75
|
CVE-2026-112312 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended al | |
|
75
|
CVE-2026-114191 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for | |
|
75
|
CVE-2026-118759 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Kubeflow Pipelines enables users to build and deploy portable, scalable machine | |
|
75
|
CVE-2026-43885 |
7.7 | 0.0034 | NET NO AUTH LOW CX NO UI | WWBN AVideo is an open source video platform. In versions up to and including 29 | |
|
75
|
CVE-2026-42552 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default er | |
|
75
|
CVE-2026-115591 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Con | |
|
75
|
CVE-2026-100353 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149 | |
|
75
|
CVE-2026-119249 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | A malicious actor with access to the network could exploit a Binding to an Unres | |
|
75
|
CVE-2026-116861 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions. | |
|
69
|
CVE-2026-44482 |
9.6 | 0.0034 | NET NO AUTH LOW CX | soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Las | |
|
69
|
CVE-2026-17832 |
9.6 | 0.0034 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
68
|
CVE-2026-113228 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
68
|
CVE-2026-6305 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed | |
|
68
|
CVE-2026-6306 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed | |
|
68
|
CVE-2025-11714 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird | |
|
67
|
CVE-2026-64832 |
8.7 | 0.0034 | NET NO AUTH LOW CX | FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVI | |
|
66
|
CVE-2026-18092 |
8.1 | 0.0034 | NET NO AUTH LOW CX | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XM | |
|
66
|
CVE-2026-112850 |
8.1 | 0.0034 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
66
|
CVE-2026-69680 |
8.1 | 0.0034 | NET NO AUTH NO UI | Origin validation error in Windows DNS allows an unauthorized attacker to perfor | |
|
66
|
CVE-2026-91635 |
8.1 | 0.0034 | NET NO AUTH NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
66
|
CVE-2026-41056 |
8.1 | 0.0034 | NET NO AUTH LOW CX | WWBN AVideo is an open source video platform. In versions 29.0 and below, the `a | |
|
65
|
CVE-2026-15081 |
7.4 | 0.0034 | NET NO AUTH NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
65
|
CVE-2026-85197 |
7.6 | 0.0034 | NET NO AUTH LOW CX | A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (M | |
|
65
|
CVE-2026-49353 |
7.5 | 0.0034 | NET NO AUTH NO UI | 9Router is an AI router & token saver. In 0.4.45 and earlier, 9Router's src/dash | |
|
56
|
CVE-2026-32172 |
8.0 | 0.0034 | NET NO AUTH | Uncontrolled search path element in Microsoft Power Apps allows an unauthorized |