Hunt List
8,490 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2025-67108 |
10.0 | 0.0031 | NET NO AUTH LOW CX NO UI | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket | |
|
80
|
CVE-2026-39305 |
10.0 | 0.0031 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to 1.5.113, the Action Orchestrat | |
|
80
|
CVE-2026-52704 |
10.0 | 0.0031 | NET NO AUTH LOW CX NO UI | Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar | |
|
80
|
CVE-2026-49108 |
9.8 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Moderno < 1.43 versions. | |
|
78
|
CVE-2026-42994 |
8.8 | 0.0031 | NET NO AUTH LOW CX NO UI | Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtaine | |
|
78
|
CVE-2026-72793 |
9.2 | 0.0031 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the | |
|
78
|
CVE-2026-72795 |
9.2 | 0.0031 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to filter embedded block content by publish a | |
|
78
|
CVE-2026-73608 |
9.2 | 0.0031 | NET NO AUTH LOW CX NO UI | SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not presen | |
|
78
|
CVE-2026-40313 |
9.1 | 0.0031 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitH | |
|
77
|
CVE-2026-72801 |
8.7 | 0.0031 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation materia | |
|
75
|
CVE-2026-61271 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Document Management and Collaboration product of Ora | |
|
75
|
CVE-2026-62551 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
75
|
CVE-2026-73891 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73894 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73918 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73933 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-28924 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | A race condition was addressed with improved handling of symbolic links. This is | |
|
75
|
CVE-2026-13184 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.Conf | |
|
75
|
CVE-2026-9638 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values | |
|
75
|
CVE-2026-48835 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 ver | |
|
75
|
CVE-2026-39490 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions. | |
|
74
|
CVE-2026-110662 |
7.2 | 0.0031 | NET NO AUTH LOW CX NO UI | The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress | |
|
74
|
CVE-2026-57210 |
7.0 | 0.0031 | NET NO AUTH LOW CX NO UI | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision serv | |
|
69
|
CVE-2026-13853 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in Journeys in Google Chrome prior to 150.0.7871.47 allowed a rem | |
|
69
|
CVE-2026-13854 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed | |
|
69
|
CVE-2026-13861 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in Core in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
69
|
CVE-2026-13878 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allow | |
|
69
|
CVE-2026-13880 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in USB in Google Chrome on Mac prior to 150.0.7871.47 allowed a r | |
|
69
|
CVE-2026-14113 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 all | |
|
69
|
CVE-2026-40154 |
9.6 | 0.0030 | NET NO AUTH LOW CX | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remo | |
|
69
|
CVE-2026-27243 |
9.3 | 0.0030 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro | |
|
69
|
CVE-2026-27245 |
9.3 | 0.0030 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro | |
|
69
|
CVE-2026-27246 |
9.3 | 0.0030 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cro | |
|
68
|
CVE-2025-13020 |
8.8 | 0.0031 | NET NO AUTH LOW CX | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixe | |
|
68
|
CVE-2026-8540 |
8.8 | 0.0031 | NET NO AUTH LOW CX | Type Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote a | |
|
66
|
CVE-2026-48788 |
8.2 | 0.0031 | NET NO AUTH LOW CX | Remark42 is a self-hosted comment engine for blogs, articles, or any other place | |
|
66
|
CVE-2026-45013 |
8.1 | 0.0031 | NET NO AUTH LOW CX | ApostropheCMS is an open-source Node.js content management system. Versions up t | |
|
65
|
CVE-2026-60641 |
7.6 | 0.0031 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
65
|
CVE-2026-55391 |
7.5 | 0.0031 | NET NO AUTH NO UI | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, a | |
|
64
|
CVE-2026-112278 |
7.1 | 0.0031 | NET NO AUTH LOW CX | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in proce | |
|
64
|
CVE-2026-3861 |
7.1 | 0.0031 | NET NO AUTH LOW CX | LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in- | |
|
64
|
CVE-2026-40037 |
7.1 | 0.0031 | NET NO AUTH LOW CX | OpenClaw before 2026.4.8 contains a request body replay vulnerability in fetchWi | |
|
57
|
CVE-2026-13801 |
8.3 | 0.0030 | NET NO AUTH | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a | |
|
57
|
CVE-2026-13804 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a r | |
|
57
|
CVE-2026-13823 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
57
|
CVE-2026-13832 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a rem | |
|
57
|
CVE-2026-13951 |
8.3 | 0.0030 | NET NO AUTH | Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 a | |
|
57
|
CVE-2026-15120 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allow | |
|
57
|
CVE-2026-15772 |
8.3 | 0.0030 | NET NO AUTH | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowe | |
|
57
|
CVE-2026-16804 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remot |