Hunt List
8,459 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-59562 |
9.8 | 0.0028 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Apache IoTDB. T | |
|
79
|
CVE-2026-39441 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 | |
|
79
|
CVE-2026-39512 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions. | |
|
79
|
CVE-2026-39519 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. | |
|
79
|
CVE-2026-40771 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. | |
|
79
|
CVE-2026-40798 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. | |
|
79
|
CVE-2026-42381 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 version | |
|
79
|
CVE-2026-42386 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 ve | |
|
79
|
CVE-2026-42639 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. | |
|
79
|
CVE-2026-42665 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. | |
|
79
|
CVE-2026-48886 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions. | |
|
79
|
CVE-2026-22332 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions. | |
|
79
|
CVE-2026-49084 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions. | |
|
79
|
CVE-2026-54187 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions. | |
|
79
|
CVE-2026-54811 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP eMember < v10.9.4 versions. | |
|
79
|
CVE-2026-54812 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-55740 |
9.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26 | |
|
78
|
CVE-2026-63687 |
9.1 | 0.0028 | NET NO AUTH LOW CX NO UI | Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT in | |
|
78
|
CVE-2026-116163 |
9.1 | 0.0028 | NET NO AUTH LOW CX NO UI | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authenti | |
|
78
|
CVE-2026-47746 |
8.9 | 0.0028 | NET NO AUTH LOW CX NO UI | Misskey is an open source, federated social media platform. Versions 12.37.0 and | |
|
78
|
CVE-2026-34727 |
9.1 | 0.0028 | NET NO AUTH LOW CX NO UI | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, | |
|
78
|
CVE-2026-46713 |
9.2 | 0.0028 | NET NO AUTH LOW CX NO UI | Misskey is an open source, federated social media platform. Versions 12.37.0 and | |
|
77
|
CVE-2020-37286 |
8.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability cause | |
|
77
|
CVE-2021-48020 |
8.3 | 0.0028 | NET NO AUTH LOW CX NO UI | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability cause | |
|
75
|
CVE-2026-28965 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | A privacy issue was addressed with improved checks. This issue is fixed in iOS 2 | |
|
75
|
CVE-2026-7528 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to unco | |
|
75
|
CVE-2026-32995 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8 | |
|
75
|
CVE-2026-106174 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 throug | |
|
75
|
CVE-2026-61569 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated streamer | |
|
75
|
CVE-2026-55973 |
7.5 | 0.0028 | NET NO AUTH LOW CX NO UI | In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporti | |
|
74
|
CVE-2026-114637 |
7.0 | 0.0028 | NET NO AUTH LOW CX NO UI | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerabili | |
|
69
|
CVE-2026-14382 |
9.6 | 0.0028 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 15 | |
|
68
|
CVE-2026-118357 |
8.8 | 0.0028 | NET NO AUTH LOW CX | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a r | |
|
68
|
CVE-2026-118359 |
8.8 | 0.0028 | NET NO AUTH LOW CX | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote | |
|
68
|
CVE-2026-100801 |
8.8 | 0.0028 | NET NO AUTH LOW CX | Privilege escalation in the DLL Services component. This vulnerability was fixed | |
|
68
|
CVE-2026-7896 |
8.8 | 0.0028 | NET NO AUTH LOW CX | Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remo | |
|
68
|
CVE-2026-8518 |
8.8 | 0.0028 | NET NO AUTH LOW CX | Use after free in Blink in Google Chrome prior to 148.0.7778.168 allowed a remot | |
|
67
|
CVE-2026-119129 |
8.6 | 0.0028 | NET NO AUTH LOW CX | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 contains a missing authoriz | |
|
67
|
CVE-2026-49478 |
8.7 | 0.0028 | NET NO AUTH NO UI | Fulcio is a certificate authority for issuing code signing certificates for an O | |
|
66
|
CVE-2026-23708 |
8.1 | 0.0028 | NET NO AUTH NO UI | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through | |
|
66
|
CVE-2026-39587 |
8.1 | 0.0028 | NET NO AUTH NO UI | Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. | |
|
65
|
CVE-2026-60629 |
7.5 | 0.0028 | NET NO AUTH NO UI | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp | |
|
65
|
CVE-2026-61138 |
7.5 | 0.0028 | NET NO AUTH NO UI | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of | |
|
65
|
CVE-2026-33376 |
7.4 | 0.0028 | NET NO AUTH NO UI | When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 add | |
|
65
|
CVE-2026-41414 |
7.4 | 0.0028 | NET NO AUTH LOW CX | Skim is a fuzzy finder designed to through files, lines, and commands. The gener | |
|
64
|
CVE-2026-101769 |
7.0 | 0.0028 | NET NO AUTH NO UI | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: | |
|
64
|
CVE-2026-41122 |
7.1 | 0.0028 | NET NO AUTH LOW CX | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release ver | |
|
55
|
CVE-2026-97328 |
7.5 | 0.0028 | NET NO AUTH | The WebP Express WordPress plugin before 0.25.16 does not escape values that its | |
|
55
|
CVE-2026-109936 |
7.5 | 0.0028 | NET NO AUTH | The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a patte | |
|
55
|
CVE-2026-91405 |
7.5 | 0.0028 | NET NO AUTH | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl |