Hunt List
8,520 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-35278 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle Peop | |
|
80
|
CVE-2026-7803 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due t | |
|
80
|
CVE-2026-12692 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platf | |
|
80
|
CVE-2026-59243 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` w | |
|
80
|
CVE-2026-15706 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Baylan Measuring I | |
|
80
|
CVE-2026-76938 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. | |
|
80
|
CVE-2026-82117 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects Hi | |
|
80
|
CVE-2026-109218 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload | |
|
80
|
CVE-2026-34265 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to expl | |
|
80
|
CVE-2026-79852 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | A vulnerability in the web-based management interface of AOS could allow an unau | |
|
80
|
CVE-2026-79854 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | A vulnerability in the affected interface of AOS-10 could allow an unauthenticat | |
|
80
|
CVE-2026-16363 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability | |
|
80
|
CVE-2026-16369 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Integer overflow in the JavaScript: WebAssembly component. This vulnerability wa | |
|
80
|
CVE-2026-16389 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions, integer overflow in the Libraries component in NS | |
|
80
|
CVE-2026-27780 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while pr | |
|
79
|
CVE-2026-19425 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | Travel Agency Management System developed by Win Men Intermational has a SQL Inj | |
|
79
|
CVE-2026-40189 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces | |
|
79
|
CVE-2026-69102 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT sig | |
|
79
|
CVE-2026-54211 |
9.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_ | |
|
79
|
CVE-2026-40504 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in t | |
|
79
|
CVE-2026-59705 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | mem0's openmemory/api component contains an unauthenticated access vulnerability | |
|
78
|
CVE-2026-39803 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel ba | |
|
78
|
CVE-2026-56445 |
8.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The qrscp application's C-STORE handler uses a specific instance from attacker-s | |
|
78
|
CVE-2026-39806 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel | |
|
78
|
CVE-2026-49128 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulne | |
|
78
|
CVE-2026-8805 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Integer Overflow or Wraparound vulnerability in the EtherNet/IP function of Mits | |
|
78
|
CVE-2026-8806 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Ser | |
|
78
|
CVE-2026-15308 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-se | |
|
78
|
CVE-2026-56124 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | phpUploader before 2.0.2 contains an unauthenticated information disclosure vuln | |
|
78
|
CVE-2026-44628 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | An unauthenticated attacker can crash the worklist server with a single crafted | |
|
77
|
CVE-2026-24253 |
8.2 | 0.0064 | NET NO AUTH LOW CX NO UI | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a | |
|
77
|
CVE-2026-64400 |
8.6 | 0.0064 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prev | |
|
77
|
CVE-2026-34327 |
8.2 | 0.0064 | NET NO AUTH LOW CX NO UI | Externally controlled reference to a resource in another sphere in Microsoft Par | |
|
75
|
CVE-2026-40355 |
7.5 | 0.0065 | NET NO AUTH LOW CX NO UI | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference | |
|
75
|
CVE-2026-49293 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spe | |
|
75
|
CVE-2026-59868 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when me | |
|
75
|
CVE-2026-59871 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, nod | |
|
75
|
CVE-2026-59922 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, | |
|
75
|
CVE-2026-59925 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, | |
|
75
|
CVE-2026-49476 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. | |
|
75
|
CVE-2026-49477 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. | |
|
75
|
CVE-2026-14257 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | brace-expansion through 5.0.7 is vulnerable to denial of service via memory exha | |
|
75
|
CVE-2026-5437 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM m | |
|
75
|
CVE-2025-65418 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traver | |
|
75
|
CVE-2026-48619 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of O | |
|
75
|
CVE-2026-57098 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Improper verification of cryptographic signature in Windows RDP Client allows an | |
|
68
|
CVE-2026-88077 |
8.8 | 0.0064 | NET NO AUTH LOW CX | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unau | |
|
64
|
CVE-2026-44503 |
7.0 | 0.0064 | NET NO AUTH LOW CX | The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:micr | |
|
64
|
CVE-2026-65675 |
7.1 | 0.0064 | NET NO AUTH LOW CX | No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an una | |
|
55
|
CVE-2026-96237 |
7.5 | 0.0064 | NET NO AUTH | Inclusion of functionality from untrusted control sphere in .NET allows an unaut |