Hunt List
7,677 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
81
|
CVE-2026-7411 |
10.0 | 0.0368 | NET NO AUTH LOW CX NO UI | In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequat | |
|
81
|
CVE-2026-53576 |
10.0 | 0.0330 | NET NO AUTH LOW CX NO UI | Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 a | |
|
81
|
CVE-2026-59726 |
10.0 | 0.0302 | NET NO AUTH LOW CX NO UI | Ruflo is an agent meta-harness for Claude Code and Codex. Prior to 3.16.3, ruflo | |
|
80
|
CVE-2026-73296 |
9.4 | 0.0365 | NET NO AUTH LOW CX NO UI | Microsoft UFO open-source framework for intelligent automation across devices an | |
|
80
|
CVE-2026-5524 |
9.8 | 0.0348 | NET NO AUTH LOW CX NO UI | The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Uploa | |
|
80
|
CVE-2026-8986 |
9.5 | 0.0328 | NET NO AUTH LOW CX NO UI | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command | |
|
80
|
CVE-2026-12571 |
9.8 | 0.0327 | NET NO AUTH LOW CX NO UI | An authentication bypass in ManageEngine DDI Central's password-reset workflow a | |
|
80
|
CVE-2026-9103 |
9.8 | 0.0321 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unau | |
|
80
|
CVE-2026-41492 |
9.8 | 0.0308 | NET NO AUTH LOW CX NO UI | Dgraph is an open source distributed GraphQL database. Prior to 25.3.3, Dgraphl | |
|
80
|
CVE-2026-50522 |
9.8 | 0.0304 | NET NO AUTH LOW CX NO UI | KEV | Microsoft SharePoint contains a deserialization of untrusted data vulnerability |
|
80
|
CVE-2026-49468 |
9.5 | 0.0303 | NET NO AUTH LOW CX NO UI | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) fo | |
|
80
|
CVE-2026-52102 |
9.8 | 0.0294 | NET NO AUTH LOW CX NO UI | An OS command injection vulnerability in the openmediavault-md plugin of OpenMed | |
|
79
|
CVE-2026-41452 |
9.3 | 0.0374 | NET NO AUTH LOW CX NO UI | Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installe | |
|
79
|
CVE-2026-18601 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impacts the fun | |
|
79
|
CVE-2026-18602 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the | |
|
79
|
CVE-2026-18614 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the func | |
|
79
|
CVE-2026-18615 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected el | |
|
79
|
CVE-2026-18616 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted el | |
|
79
|
CVE-2026-18684 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affe | |
|
79
|
CVE-2026-18685 |
8.9 | 0.0362 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Imp | |
|
79
|
CVE-2026-34415 |
9.3 | 0.0357 | NET NO AUTH LOW CX NO UI | Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input vali | |
|
79
|
CVE-2026-58480 |
9.2 | 0.0357 | NET NO AUTH LOW CX NO UI | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthentic | |
|
79
|
CVE-2026-19348 |
8.9 | 0.0357 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea | |
|
79
|
CVE-2026-56782 |
9.3 | 0.0356 | NET NO AUTH LOW CX NO UI | Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/ | |
|
79
|
CVE-2026-16232 |
9.3 | 0.0352 | NET NO AUTH LOW CX NO UI | KEV | Check Point SmartConsole contains an improper authentication vulnerability which |
|
79
|
CVE-2026-60121 |
9.3 | 0.0330 | NET NO AUTH LOW CX NO UI | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerabi | |
|
79
|
CVE-2026-41924 |
9.3 | 0.0320 | NET NO AUTH LOW CX NO UI | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command in | |
|
79
|
CVE-2026-71944 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71945 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71946 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71947 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71948 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71949 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71950 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71951 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71952 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71953 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71954 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1 | |
|
79
|
CVE-2026-71955 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_2 | |
|
79
|
CVE-2026-71956 |
9.3 | 0.0317 | NET NO AUTH LOW CX NO UI | D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_2 | |
|
79
|
CVE-2026-41923 |
9.3 | 0.0309 | NET NO AUTH LOW CX NO UI | WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command in | |
|
79
|
CVE-2026-48313 |
9.3 | 0.0295 | NET NO AUTH LOW CX NO UI | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limi | |
|
78
|
CVE-2026-34413 |
8.8 | 0.0311 | NET NO AUTH LOW CX NO UI | Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication | |
|
78
|
CVE-2026-6025 |
8.9 | 0.0300 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This af | |
|
78
|
CVE-2026-6026 |
8.9 | 0.0298 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th | |
|
78
|
CVE-2026-6028 |
8.9 | 0.0298 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191 | |
|
78
|
CVE-2026-6029 |
8.9 | 0.0298 | NET NO AUTH LOW CX NO UI | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affec | |
|
76
|
CVE-2026-48933 |
7.5 | 0.0371 | NET NO AUTH LOW CX NO UI | A flaw in Node.js WebCrypto implementation can crash the process if the input of | |
|
76
|
CVE-2023-2828 |
7.5 | 0.0370 | NET NO AUTH LOW CX NO UI | Every `named` instance configured to run as a recursive resolver maintains a cac | |
|
70
|
CVE-2026-45321 |
9.6 | 0.0328 | NET NO AUTH LOW CX | KEV RW | TanStack contains an unspecified vulnerability that allowed malicious versions o |