Hunt List
8,178 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
78
|
CVE-2026-12316 |
9.1 | 0.0024 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Security component. This vulnerability was fixed i | |
|
78
|
CVE-2026-87095 |
9.1 | 0.0024 | NET NO AUTH LOW CX NO UI | Sensitive information disclosure and manipulation due to improper authorization | |
|
78
|
CVE-2026-75625 |
9.1 | 0.0024 | NET NO AUTH LOW CX NO UI | Kraken agents fail to verify peer-to-peer downloaded blobs against their request | |
|
78
|
CVE-2023-24215 |
9.1 | 0.0024 | NET NO AUTH LOW CX NO UI | Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware | |
|
77
|
CVE-2026-116183 |
8.7 | 0.0024 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerabili | |
|
77
|
CVE-2026-33362 |
8.6 | 0.0024 | NET NO AUTH LOW CX NO UI | In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (b | |
|
76
|
CVE-2026-39432 |
8.2 | 0.0024 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Inco | |
|
76
|
CVE-2026-40726 |
8.2 | 0.0024 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 vers | |
|
76
|
CVE-2026-91445 |
8.2 | 0.0024 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component | |
|
76
|
CVE-2026-45089 |
8.2 | 0.0024 | NET NO AUTH LOW CX NO UI | Dalfox is a powerful open-source XSS scanner and utility focused on automation. | |
|
75
|
CVE-2026-43652 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | A permissions issue was addressed with additional restrictions. This issue is fi | |
|
75
|
CVE-2026-104594 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity- | |
|
75
|
CVE-2026-52695 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions | |
|
75
|
CVE-2026-74758 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < | |
|
75
|
CVE-2026-78048 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 | |
|
75
|
CVE-2026-33357 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5. | |
|
75
|
CVE-2026-119325 |
7.5 | 0.0024 | NET NO AUTH LOW CX NO UI | Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken acc | |
|
74
|
CVE-2026-114636 |
7.0 | 0.0024 | NET NO AUTH LOW CX NO UI | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernet | |
|
74
|
CVE-2026-111314 |
7.2 | 0.0024 | NET NO AUTH LOW CX NO UI | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin | |
|
74
|
CVE-2026-111111 |
7.2 | 0.0024 | NET NO AUTH LOW CX NO UI | The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Ad | |
|
74
|
CVE-2026-116622 |
7.2 | 0.0024 | NET NO AUTH LOW CX NO UI | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerabl | |
|
69
|
CVE-2026-13882 |
9.6 | 0.0024 | NET NO AUTH LOW CX | Race in USB in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh | |
|
69
|
CVE-2026-14152 |
9.6 | 0.0024 | NET NO AUTH LOW CX | Out of bounds read and write in ANGLE in Google Chrome prior to 150.0.7871.47 al | |
|
69
|
CVE-2026-14397 |
9.6 | 0.0024 | NET NO AUTH LOW CX | Out of bounds write in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allo | |
|
68
|
CVE-2026-8002 |
8.8 | 0.0024 | NET NO AUTH LOW CX | Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a | |
|
68
|
CVE-2026-6001 |
8.8 | 0.0024 | NET NO AUTH LOW CX | Authorization bypass through User-Controlled key vulnerability in ABIS Technolog | |
|
68
|
CVE-2026-44988 |
8.8 | 0.0024 | NET NO AUTH LOW CX | LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and | |
|
68
|
CVE-2026-76025 |
8.8 | 0.0024 | NET NO AUTH LOW CX | Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a r | |
|
68
|
CVE-2026-76031 |
8.8 | 0.0024 | NET NO AUTH LOW CX | Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote | |
|
68
|
CVE-2026-31940 |
8.8 | 0.0024 | NET NO AUTH LOW CX | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, in | |
|
67
|
CVE-2026-55069 |
8.7 | 0.0024 | NET NO AUTH NO UI | Kestra is an open-source, event-driven orchestration platform. Prior to 1.3.24, | |
|
65
|
CVE-2026-87865 |
7.4 | 0.0024 | NET NO AUTH NO UI | When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial | |
|
65
|
CVE-2026-91449 |
7.4 | 0.0024 | NET NO AUTH NO UI | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone | |
|
65
|
CVE-2026-83366 |
7.4 | 0.0024 | NET NO AUTH NO UI | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit | |
|
65
|
CVE-2026-91288 |
7.4 | 0.0024 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
65
|
CVE-2026-91337 |
7.4 | 0.0024 | NET NO AUTH NO UI | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: | |
|
65
|
CVE-2026-55524 |
7.5 | 0.0024 | NET NO AUTH NO UI | PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, the web_cr | |
|
64
|
CVE-2025-62057 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-22328 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions. | |
|
64
|
CVE-2025-58966 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-116647 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Tanium addressed an improper output sanitization vulnerability in Comply. | |
|
64
|
CVE-2026-42692 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions. | |
|
64
|
CVE-2026-54866 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor | |
|
64
|
CVE-2026-116208 |
7.2 | 0.0024 | NET NO AUTH LOW CX | YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability i | |
|
64
|
CVE-2026-47015 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
64
|
CVE-2026-70858 |
7.1 | 0.0024 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
57
|
CVE-2026-12465 |
8.3 | 0.0024 | NET NO AUTH | Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allow | |
|
57
|
CVE-2026-15119 |
8.3 | 0.0024 | NET NO AUTH | Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote a | |
|
57
|
CVE-2026-14429 |
8.3 | 0.0024 | NET NO AUTH | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150 | |
|
55
|
CVE-2025-13012 |
7.5 | 0.0024 | NET NO AUTH | Race condition in the Graphics component. This vulnerability was fixed in Firefo |