Hunt List
8,105 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-43992 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-securit | |
|
80
|
CVE-2026-6508 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Re | |
|
80
|
CVE-2026-59836 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 | |
|
79
|
CVE-2026-46423 |
9.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
79
|
CVE-2026-91644 |
9.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
79
|
CVE-2026-18236 |
9.3 | 0.0022 | NET NO AUTH LOW CX NO UI | A vulnerability in the Agent Development Kit (ADK) allows for continuation forge | |
|
78
|
CVE-2026-9648 |
9.1 | 0.0022 | NET NO AUTH LOW CX NO UI | The crypton-x509-validation Haskell library fails to enforce X.509 NameConstrain | |
|
78
|
CVE-2026-6900 |
9.1 | 0.0022 | NET NO AUTH LOW CX NO UI | Improper certificate validation vulnerability in B&R Industrial Automation GmbH | |
|
77
|
CVE-2026-16000 |
8.7 | 0.0022 | NET NO AUTH LOW CX NO UI | Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCi | |
|
77
|
CVE-2026-67073 |
8.6 | 0.0022 | NET NO AUTH LOW CX NO UI | HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Co | |
|
75
|
CVE-2026-52711 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions. | |
|
75
|
CVE-2026-35489 |
7.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Tandoor Recipes is an application for managing recipes, planning meals, and buil | |
|
75
|
CVE-2026-40775 |
7.3 | 0.0022 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions. | |
|
75
|
CVE-2026-0156 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety | |
|
75
|
CVE-2026-56454 |
7.5 | 0.0022 | NET NO AUTH LOW CX NO UI | HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the u | |
|
69
|
CVE-2026-7908 |
9.6 | 0.0022 | NET NO AUTH LOW CX | Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a r | |
|
69
|
CVE-2026-12027 |
9.6 | 0.0022 | NET NO AUTH LOW CX | Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.11 | |
|
69
|
CVE-2026-91622 |
9.3 | 0.0022 | NET NO AUTH LOW CX | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
69
|
CVE-2026-7161 |
9.3 | 0.0022 | NET NO AUTH LOW CX | An insufficient encryption vulnerability exists in the Device Authentication fun | |
|
69
|
CVE-2026-7910 |
9.6 | 0.0022 | NET NO AUTH LOW CX | Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote | |
|
68
|
CVE-2026-7903 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Integer overflow in ANGLE in Google Chrome on Mac,Windows prior to 148.0.7778.96 | |
|
68
|
CVE-2026-7973 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allo | |
|
68
|
CVE-2026-12020 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 allow | |
|
68
|
CVE-2026-7991 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote at | |
|
68
|
CVE-2026-7992 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in UI in Google Chrome on Linux, Chro | |
|
68
|
CVE-2026-7995 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a | |
|
68
|
CVE-2026-6761 |
8.8 | 0.0022 | NET NO AUTH LOW CX | Privilege escalation in the Networking component. This vulnerability was fixed i | |
|
68
|
CVE-2026-10054 |
8.8 | 0.0022 | NET NO AUTH LOW CX | In affected versions of Eclipse Theia (1.8.1 and later), the browser backend exp | |
|
67
|
CVE-2026-116825 |
8.3 | 0.0022 | NET NO AUTH NO UI | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService: | |
|
67
|
CVE-2026-39338 |
8.6 | 0.0022 | NET NO AUTH LOW CX | ChurchCRM is an open-source church management system. Prior to 7.1.0, a Blind Re | |
|
66
|
CVE-2026-12012 |
8.1 | 0.0022 | NET NO AUTH NO UI | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an at | |
|
66
|
CVE-2026-116192 |
8.2 | 0.0022 | NET NO AUTH NO UI | rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerabil | |
|
66
|
CVE-2026-11878 |
8.2 | 0.0022 | NET NO AUTH NO UI | Improper neutralization of input during web page generation ('cross-site scripti | |
|
66
|
CVE-2026-69105 |
8.1 | 0.0022 | NET NO AUTH LOW CX | An unauthenticated attacker may cause untrusted package content to be cached und | |
|
66
|
CVE-2026-87864 |
8.1 | 0.0022 | NET NO AUTH NO UI | Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the | |
|
66
|
CVE-2026-41002 |
8.1 | 0.0022 | NET NO AUTH NO UI | The base directory (`spring.cloud.config.server.git.basedir`) used by the Spring | |
|
65
|
CVE-2026-87102 |
7.4 | 0.0022 | NET NO AUTH NO UI | Sensitive information disclosure and manipulation due to improper token validati | |
|
65
|
CVE-2026-87103 |
7.4 | 0.0022 | NET NO AUTH NO UI | Sensitive information disclosure and manipulation due to improper token validati | |
|
65
|
CVE-2026-53425 |
7.6 | 0.0022 | NET NO AUTH LOW CX | Insufficient Verification of Data Authenticity vulnerability in dropbox samly al | |
|
65
|
CVE-2026-50575 |
7.7 | 0.0022 | NET NO AUTH NO UI | BetterDesk is a remote desktop management solution. BetterDesk versions through | |
|
64
|
CVE-2026-63575 |
7.1 | 0.0022 | NET NO AUTH LOW CX | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12Parame | |
|
64
|
CVE-2026-54192 |
7.1 | 0.0022 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions. | |
|
57
|
CVE-2026-7914 |
8.3 | 0.0022 | NET NO AUTH | Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778. | |
|
57
|
CVE-2026-7956 |
8.3 | 0.0022 | NET NO AUTH | Use after free in Navigation in Google Chrome prior to 148.0.7778.96 allowed a r | |
|
57
|
CVE-2026-7963 |
8.3 | 0.0022 | NET NO AUTH | Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.77 | |
|
57
|
CVE-2026-12464 |
8.3 | 0.0022 | NET NO AUTH | Use after free in Browser in Google Chrome prior to 149.0.7827.155 allowed a rem | |
|
57
|
CVE-2026-12467 |
8.3 | 0.0022 | NET NO AUTH | Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed a | |
|
57
|
CVE-2026-7905 |
8.3 | 0.0022 | NET NO AUTH | Insufficient validation of untrusted input in Media in Google Chrome on Android | |
|
57
|
CVE-2026-7916 |
8.3 | 0.0022 | NET NO AUTH | Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7 | |
|
55
|
CVE-2026-17916 |
7.5 | 0.0022 | NET NO AUTH | Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922 |