Hunt List
8,520 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
90
|
CVE-2026-31158 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | 1 PoC | SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 a |
|
80
|
CVE-2026-61962 |
10.0 | 0.0069 | NET NO AUTH LOW CX NO UI | Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions. | |
|
80
|
CVE-2026-7871 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 allows users with Redis access to execute | |
|
80
|
CVE-2026-98490 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: openvs | |
|
80
|
CVE-2026-98548 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: sctp: disca | |
|
80
|
CVE-2026-79859 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that co | |
|
80
|
CVE-2026-24014 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances us | |
|
80
|
CVE-2026-46455 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component | |
|
80
|
CVE-2026-62183 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | Improper Privilege Management vulnerability in Apache Syncope. When: * the all | |
|
80
|
CVE-2026-28812 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 w | |
|
80
|
CVE-2026-34884 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability | |
|
80
|
CVE-2026-79844 |
10.0 | 0.0069 | NET NO AUTH LOW CX NO UI | Authentication bypass vulnerabilities in the affected interface of AOS-10 could | |
|
80
|
CVE-2026-79850 |
10.0 | 0.0069 | NET NO AUTH LOW CX NO UI | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate | |
|
80
|
CVE-2026-48773 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Versions 2.0 | |
|
80
|
CVE-2026-8983 |
10.0 | 0.0069 | NET NO AUTH LOW CX NO UI | Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authen | |
|
80
|
CVE-2026-62390 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
80
|
CVE-2026-32227 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects | |
|
80
|
CVE-2026-52186 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a | |
|
80
|
CVE-2026-51821 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability in Shenzhou Shihan Video Conference System v.1.0 all | |
|
80
|
CVE-2026-109219 |
9.8 | 0.0069 | NET NO AUTH LOW CX NO UI | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in ve | |
|
80
|
CVE-2026-72565 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenti | |
|
79
|
CVE-2026-65701 |
9.3 | 0.0069 | NET NO AUTH LOW CX NO UI | SoftVC VITS Singing Voice Conversion through commit 730930d contains a path trav | |
|
79
|
CVE-2026-112005 |
9.2 | 0.0069 | NET NO AUTH LOW CX NO UI | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows | |
|
79
|
CVE-2026-18191 |
9.3 | 0.0069 | NET NO AUTH LOW CX NO UI | VIN-DS783E-E6 developed by Vacron has a Hidden Functionality vulnerability, allo | |
|
79
|
CVE-2026-77930 |
9.3 | 0.0069 | NET NO AUTH LOW CX NO UI | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that a | |
|
79
|
CVE-2026-118690 |
9.3 | 0.0069 | NET NO AUTH LOW CX NO UI | Signal K Server before 2.33.0 contains a missing authentication vulnerability th | |
|
79
|
CVE-2026-54363 |
9.3 | 0.0069 | NET NO AUTH LOW CX NO UI | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability tha | |
|
79
|
CVE-2026-67443 |
9.2 | 0.0069 | NET NO AUTH LOW CX NO UI | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3 | |
|
79
|
CVE-2026-74886 |
9.3 | 0.0068 | NET NO AUTH LOW CX NO UI | openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerabil | |
|
78
|
CVE-2026-49119 |
8.7 | 0.0069 | NET NO AUTH LOW CX NO UI | Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer | |
|
78
|
CVE-2026-28369 |
9.1 | 0.0069 | NET NO AUTH LOW CX NO UI | A flaw was found in Undertow. When Undertow receives an HTTP request where the f | |
|
78
|
CVE-2026-5787 |
9.1 | 0.0069 | NET NO AUTH LOW CX NO UI | An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7 | |
|
77
|
CVE-2026-47623 |
8.2 | 0.0069 | NET NO AUTH LOW CX NO UI | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause d | |
|
75
|
CVE-2026-89707 |
7.5 | 0.0070 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nfsd: relea | |
|
75
|
CVE-2026-97557 |
7.5 | 0.0070 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
75
|
CVE-2026-112396 |
7.5 | 0.0069 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap | |
|
75
|
CVE-2023-54219 |
7.5 | 0.0069 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: Revert "IB/ | |
|
75
|
CVE-2026-46587 |
7.3 | 0.0069 | NET NO AUTH LOW CX NO UI | Improper Input Validation vulnerability in Apache Camel. This issue affects Apa | |
|
75
|
CVE-2026-46588 |
7.3 | 0.0069 | NET NO AUTH LOW CX NO UI | Improper Input Validation vulnerability in Apache Camel. This issue affects Apa | |
|
75
|
CVE-2026-49042 |
7.3 | 0.0069 | NET NO AUTH LOW CX NO UI | Improper Input Validation vulnerability in Apache Camel. This issue affects Apa | |
|
75
|
CVE-2026-52746 |
7.5 | 0.0069 | NET NO AUTH LOW CX NO UI | JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, m | |
|
68
|
CVE-2026-96251 |
8.8 | 0.0069 | NET NO AUTH LOW CX | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allo | |
|
68
|
CVE-2026-69854 |
9.0 | 0.0069 | NET NO AUTH NO UI | Improper authentication in Spring Cloud Azure allows an unauthorized attacker to | |
|
66
|
CVE-2026-88117 |
8.1 | 0.0070 | NET NO AUTH NO UI | Use after free in Windows DHCP Server allows an unauthorized attacker to execute | |
|
66
|
CVE-2026-57817 |
8.1 | 0.0069 | NET NO AUTH NO UI | The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the | |
|
66
|
CVE-2026-58595 |
8.1 | 0.0069 | NET NO AUTH LOW CX | Improper restriction of rendered ui layers or frames in Microsoft Bing App for I | |
|
66
|
CVE-2026-112427 |
8.1 | 0.0069 | NET NO AUTH NO UI | An authentication issue was addressed with improved state management. This issue | |
|
66
|
CVE-2026-88171 |
8.1 | 0.0069 | NET NO AUTH NO UI | Double free in Windows DHCP Server allows an unauthorized attacker to execute co | |
|
66
|
CVE-2026-53510 |
8.1 | 0.0069 | NET NO AUTH NO UI | Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operatio | |
|
66
|
CVE-2026-55607 |
7.7 | 0.0069 | NET NO AUTH LOW CX | Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's |