Hunt List
8,524 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-41635 |
9.8 | 0.0062 | NET NO AUTH LOW CX NO UI | Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, one of them | |
|
80
|
CVE-2026-14976 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected | |
|
80
|
CVE-2026-54735 |
10.0 | 0.0061 | NET NO AUTH LOW CX NO UI | Prebid Server is an open-source solution for running real-time advertising aucti | |
|
80
|
CVE-2026-1949 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | Delta Electronics AS320T has incorrect calculation of the buffer size on the sta | |
|
80
|
CVE-2026-1951 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | Delta Electronics AS320T has no checking of the length of the buffer with the di | |
|
80
|
CVE-2026-50242 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.14812 | |
|
80
|
CVE-2026-62422 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1. | |
|
80
|
CVE-2026-47865 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | VMware Avi Load Balancer contains an authentication bypass vulnerability. A mali | |
|
80
|
CVE-2026-64731 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | A path handling issue was addressed with improved validation. This issue is fixe | |
|
80
|
CVE-2026-79856 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could | |
|
80
|
CVE-2026-103688 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not | |
|
80
|
CVE-2026-50770 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to | |
|
80
|
CVE-2026-50774 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privilege | |
|
80
|
CVE-2026-116508 |
10.0 | 0.0061 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. A | |
|
80
|
CVE-2026-40288 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI | |
|
80
|
CVE-2026-16360 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some o | |
|
80
|
CVE-2026-74988 |
9.8 | 0.0061 | NET NO AUTH LOW CX NO UI | Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of thes | |
|
79
|
CVE-2026-49757 |
9.2 | 0.0062 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in team-alembic AshAuthenticatio | |
|
79
|
CVE-2026-70478 |
9.2 | 0.0062 | NET NO AUTH LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
79
|
CVE-2022-51026 |
9.3 | 0.0061 | NET NO AUTH LOW CX NO UI | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability tha | |
|
78
|
CVE-2016-20103 |
8.7 | 0.0061 | NET NO AUTH LOW CX NO UI | Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability | |
|
78
|
CVE-2016-20104 |
8.7 | 0.0061 | NET NO AUTH LOW CX NO UI | EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path tra | |
|
78
|
CVE-2022-51024 |
8.7 | 0.0061 | NET NO AUTH LOW CX NO UI | Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows | |
|
78
|
CVE-2026-119052 |
8.7 | 0.0061 | NET NO AUTH LOW CX NO UI | llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in th | |
|
78
|
CVE-2026-13007 |
8.7 | 0.0061 | NET NO AUTH LOW CX NO UI | Tenable Identity Exposure contains multiple unauthenticated API endpoints under | |
|
78
|
CVE-2026-52736 |
8.7 | 0.0061 | NET NO AUTH LOW CX NO UI | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a remote unauthe | |
|
76
|
CVE-2026-34444 |
7.9 | 0.0061 | NET NO AUTH LOW CX NO UI | Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, | |
|
75
|
CVE-2026-51926 |
7.5 | 0.0062 | NET NO AUTH LOW CX NO UI | An issue in docuForm GmbH FSM Client v.11.11c allows a remote attacker to obtain | |
|
75
|
CVE-2026-65948 |
7.3 | 0.0062 | NET NO AUTH LOW CX NO UI | UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: | |
|
75
|
CVE-2026-35037 |
7.2 | 0.0062 | NET NO AUTH LOW CX NO UI | Ech0 is an open-source, self-hosted publishing platform for personal idea sharin | |
|
75
|
CVE-2026-54234 |
7.5 | 0.0062 | NET NO AUTH LOW CX NO UI | vLLM is a high-throughput and memory-efficient inference and serving engine for | |
|
75
|
CVE-2026-113658 |
7.5 | 0.0062 | NET NO AUTH LOW CX NO UI | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33 | |
|
75
|
CVE-2026-72548 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 | |
|
75
|
CVE-2026-38426 |
7.3 | 0.0061 | NET NO AUTH LOW CX NO UI | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a | |
|
75
|
CVE-2026-110305 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensi | |
|
75
|
CVE-2026-98964 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvmet: use | |
|
75
|
CVE-2026-89685 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix c | |
|
75
|
CVE-2026-48706 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | Envoy is an open source edge and service proxy designed for cloud-native applica | |
|
75
|
CVE-2026-72688 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | A missing authentication vulnerability in OpenSignLabs opensignserver through 2. | |
|
75
|
CVE-2026-72543 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | An insecure direct object reference vulnerability in OpenSignLabs OpenSign throu | |
|
75
|
CVE-2026-72552 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unaut | |
|
75
|
CVE-2026-72600 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unau | |
|
75
|
CVE-2026-72601 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated re | |
|
75
|
CVE-2026-66908 |
7.5 | 0.0061 | NET NO AUTH LOW CX NO UI | Improper Authentication vulnerability in Apache Camel Platform HTTP Main compone | |
|
69
|
CVE-2026-27303 |
9.6 | 0.0061 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserializati | |
|
69
|
CVE-2026-49035 |
9.2 | 0.0061 | NET NO AUTH NO UI | The affected product is vulnerable to a heap-based buffer overflow via a crafted | |
|
69
|
CVE-2026-34263 |
9.6 | 0.0061 | NET NO AUTH LOW CX | Due to improper Spring Security configuration, SAP Commerce Cloud allows an unau | |
|
68
|
CVE-2026-12443 |
8.8 | 0.0061 | NET NO AUTH LOW CX | Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 al | |
|
66
|
CVE-2026-98532 |
8.1 | 0.0061 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: ipv6: do no | |
|
65
|
CVE-2026-118147 |
7.4 | 0.0061 | NET NO AUTH NO UI | Improper certificate validation in Visual Studio allows an unauthorized attacker |