Hunt List
8,448 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-48772 |
10.0 | 0.0023 | NET NO AUTH LOW CX NO UI | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions | |
|
80
|
CVE-2026-34236 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. From versio | |
|
80
|
CVE-2026-43992 |
9.8 | 0.0022 | NET NO AUTH LOW CX NO UI | JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-securit | |
|
79
|
CVE-2026-42761 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-54815 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-54819 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-56073 |
9.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Cap-go before 12.128.2 contains an authentication bypass vulnerability in OTP ve | |
|
78
|
CVE-2026-42514 |
8.8 | 0.0023 | NET NO AUTH LOW CX NO UI | This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext with | |
|
78
|
CVE-2026-49454 |
9.1 | 0.0023 | NET NO AUTH LOW CX NO UI | Relyra is a strict-by-default SAML 2.0 Service Provider library for Elixir and P | |
|
77
|
CVE-2026-47074 |
8.7 | 0.0023 | NET NO AUTH LOW CX NO UI | Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, E | |
|
76
|
CVE-2026-56836 |
8.2 | 0.0023 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. From version 4.5.112 to before version | |
|
76
|
CVE-2026-2379 |
8.2 | 0.0023 | NET NO AUTH LOW CX NO UI | On affected platforms with hardware IPSec support running Arista EOS with certai | |
|
75
|
CVE-2026-113811 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory | |
|
75
|
CVE-2026-119283 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | joserfc is a Python library that provides an implementation of several JSON Obje | |
|
75
|
CVE-2026-42377 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exp | |
|
75
|
CVE-2026-112921 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as im | |
|
75
|
CVE-2026-12576 |
7.5 | 0.0023 | NET NO AUTH LOW CX NO UI | DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a | |
|
75
|
CVE-2026-8788 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections. T | |
|
75
|
CVE-2026-9658 |
7.3 | 0.0023 | NET NO AUTH LOW CX NO UI | Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not bloc | |
|
69
|
CVE-2026-14398 |
9.6 | 0.0023 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote | |
|
69
|
CVE-2026-14419 |
9.6 | 0.0023 | NET NO AUTH LOW CX | Use after free in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote | |
|
69
|
CVE-2026-14425 |
9.6 | 0.0023 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote | |
|
68
|
CVE-2026-55237 |
8.8 | 0.0023 | NET NO AUTH LOW CX | AutoGPT is a workflow automation platform for creating, deploying, and managing | |
|
68
|
CVE-2026-5141 |
8.8 | 0.0023 | NET NO AUTH LOW CX | Improper Privilege Management, Improper Access Control, Incorrect privilege assi | |
|
68
|
CVE-2026-2465 |
8.8 | 0.0023 | NET NO AUTH LOW CX | Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering | |
|
68
|
CVE-2026-6769 |
8.8 | 0.0023 | NET NO AUTH LOW CX | Privilege escalation in the Debugger component. This vulnerability was fixed in | |
|
67
|
CVE-2026-116825 |
8.3 | 0.0022 | NET NO AUTH NO UI | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService: | |
|
66
|
CVE-2026-91346 |
8.2 | 0.0023 | NET NO AUTH LOW CX | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl | |
|
66
|
CVE-2026-12012 |
8.1 | 0.0022 | NET NO AUTH NO UI | Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an at | |
|
64
|
CVE-2026-22339 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions. | |
|
64
|
CVE-2026-41557 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions. | |
|
64
|
CVE-2026-42385 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 vers | |
|
64
|
CVE-2026-57317 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1. | |
|
64
|
CVE-2025-58964 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2025-59556 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2025-62036 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-61993 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | |
|
64
|
CVE-2026-61995 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions | |
|
64
|
CVE-2026-17811 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allow | |
|
64
|
CVE-2026-101583 |
7.0 | 0.0023 | NET NO AUTH NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel | |
|
64
|
CVE-2026-66322 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize | |
|
64
|
CVE-2026-63570 |
7.1 | 0.0023 | NET NO AUTH LOW CX | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legio | |
|
57
|
CVE-2026-8525 |
8.3 | 0.0023 | NET NO AUTH | Heap buffer overflow in ANGLE in Google Chrome on Mac prior to 148.0.7778.168 al | |
|
57
|
CVE-2026-12016 |
8.3 | 0.0023 | NET NO AUTH | Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.11 | |
|
57
|
CVE-2026-12023 |
8.3 | 0.0023 | NET NO AUTH | Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a | |
|
57
|
CVE-2026-12028 |
8.3 | 0.0023 | NET NO AUTH | Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowe | |
|
57
|
CVE-2026-7914 |
8.3 | 0.0022 | NET NO AUTH | Type Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778. | |
|
55
|
CVE-2026-12455 |
7.5 | 0.0023 | NET NO AUTH | Use after free in Tab Strip in Google Chrome prior to 149.0.7827.155 allowed a r | |
|
55
|
CVE-2026-41020 |
7.5 | 0.0023 | NET NO AUTH | Eaton easyE4 uses a static nonce during authentication, which could allow an una | |
|
54
|
CVE-2026-116195 |
7.0 | 0.0023 | NET NO AUTH | Rclone before 1.75.2 contains a path traversal vulnerability in the local backen |