Hunt List
8,520 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2024-57521 |
10.0 | 0.0068 | NET NO AUTH LOW CX NO UI | SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker | |
|
80
|
CVE-2026-28564 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnera | |
|
80
|
CVE-2026-71289 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implement | |
|
80
|
CVE-2026-68079 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code | |
|
80
|
CVE-2026-80980 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/smc: st | |
|
80
|
CVE-2026-89526 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Va | |
|
80
|
CVE-2026-90104 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: ze | |
|
80
|
CVE-2026-52439 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | An issue in xiandafu beetl 3.20.2 allows a remote attacker to execute arbitrary | |
|
80
|
CVE-2026-14974 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote a | |
|
80
|
CVE-2026-50772 |
9.8 | 0.0068 | NET NO AUTH LOW CX NO UI | An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execut | |
|
79
|
CVE-2026-50561 |
9.4 | 0.0068 | NET NO AUTH LOW CX NO UI | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent | |
|
79
|
CVE-2026-117532 |
9.3 | 0.0068 | NET NO AUTH LOW CX NO UI | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerabi | |
|
78
|
CVE-2026-45677 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
78
|
CVE-2026-71962 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerabili | |
|
78
|
CVE-2026-116011 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json | |
|
78
|
CVE-2026-27690 |
9.1 | 0.0068 | NET NO AUTH LOW CX NO UI | Due to an HTTP Request Smuggling vulnerability in SAP Approuter, an unauthentica | |
|
78
|
CVE-2026-112330 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a | |
|
78
|
CVE-2026-112331 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a | |
|
78
|
CVE-2026-75915 |
8.7 | 0.0068 | NET NO AUTH LOW CX NO UI | CodeWhale versions before 0.8.64 contain an environment variable exposure vulner | |
|
78
|
CVE-2026-86414 |
9.1 | 0.0068 | NET NO AUTH LOW CX NO UI | An HTTP proxy can trick libcurl into sending the origin's credentials (Basic pas | |
|
78
|
CVE-2026-87861 |
9.1 | 0.0068 | NET NO AUTH LOW CX NO UI | When using ambient user credentials, an HTTP request directed to one origin may | |
|
77
|
CVE-2026-54904 |
8.2 | 0.0067 | NET NO AUTH LOW CX NO UI | concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurre | |
|
76
|
CVE-2026-13763 |
7.9 | 0.0068 | NET NO AUTH LOW CX NO UI | Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer | |
|
75
|
CVE-2026-45367 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
75
|
CVE-2026-49485 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
75
|
CVE-2026-52956 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: libceph: Fi | |
|
75
|
CVE-2026-80637 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: netfilter: | |
|
75
|
CVE-2026-90234 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFS: Return | |
|
75
|
CVE-2026-60080 |
7.3 | 0.0068 | NET NO AUTH LOW CX NO UI | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. T | |
|
75
|
CVE-2026-68500 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | Sylius Mollie Plugin provides Mollie payment integration for Sylius applications | |
|
75
|
CVE-2026-55470 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i | |
|
75
|
CVE-2026-64194 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS com | |
|
75
|
CVE-2026-27857 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1M | |
|
75
|
CVE-2026-104016 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | ProtobufParser parses length-prefixed protobuf string and bytes fields by checki | |
|
75
|
CVE-2026-35485 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | text-generation-webui is an open-source web interface for running Large Language | |
|
75
|
CVE-2026-98550 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: tipc: rejec | |
|
75
|
CVE-2026-89544 |
7.5 | 0.0068 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix | |
|
75
|
CVE-2026-34651 |
7.5 | 0.0067 | NET NO AUTH LOW CX NO UI | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2 | |
|
75
|
CVE-2026-89647 |
7.5 | 0.0067 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: do no | |
|
75
|
CVE-2026-89648 |
7.5 | 0.0067 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: cap d | |
|
74
|
CVE-2026-57190 |
7.0 | 0.0068 | NET NO AUTH LOW CX NO UI | Asterisk is an open source private branch exchange and telephony toolkit. Prior | |
|
68
|
CVE-2023-25739 |
8.8 | 0.0068 | NET NO AUTH LOW CX | Module load requests that failed were not being checked as to whether or not the | |
|
68
|
CVE-2026-57527 |
8.7 | 0.0068 | NET NO AUTH LOW CX | Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure de | |
|
68
|
CVE-2026-11325 |
8.8 | 0.0068 | NET NO AUTH LOW CX | Description Cloudflare was recently notified by external researchers of vulne | |
|
68
|
CVE-2023-25744 |
8.8 | 0.0067 | NET NO AUTH LOW CX | Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these | |
|
66
|
CVE-2026-69913 |
8.1 | 0.0068 | NET NO AUTH NO UI | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code | |
|
66
|
CVE-2026-45135 |
8.1 | 0.0068 | NET NO AUTH NO UI | Caddy is an extensible server platform that uses TLS by default. From 2.7.0 unti | |
|
66
|
CVE-2026-84012 |
8.1 | 0.0067 | NET NO AUTH NO UI | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to | |
|
55
|
CVE-2026-61363 |
7.5 | 0.0068 | NET NO AUTH | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac | |
|
55
|
CVE-2026-59134 |
7.5 | 0.0068 | NET NO AUTH | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac |