Hunt List
8,540 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-26150 |
10.0 | 0.0057 | NET NO AUTH LOW CX NO UI | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized a | |
|
80
|
CVE-2026-94510 |
9.9 | 0.0057 | NET NO AUTH LOW CX NO UI | Authorization bypass through user-controlled key in Microsoft Bookings allows an | |
|
80
|
CVE-2026-54408 |
9.8 | 0.0057 | NET NO AUTH LOW CX NO UI | A malicious actor with access to the network could exploit an Improper Access Co | |
|
80
|
CVE-2026-42196 |
9.9 | 0.0056 | NET NO AUTH LOW CX NO UI | django-s3file is a lightweight file upload input for Django and Amazon S3. Prior | |
|
80
|
CVE-2026-35300 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
80
|
CVE-2026-57811 |
10.0 | 0.0056 | NET NO AUTH LOW CX NO UI | Improper Control of Generation of Code ('Code Injection') vulnerability in Realt | |
|
80
|
CVE-2026-56032 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions. | |
|
80
|
CVE-2026-56057 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. | |
|
80
|
CVE-2026-57621 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions. | |
|
80
|
CVE-2026-57677 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce | |
|
80
|
CVE-2026-14535 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImports | |
|
80
|
CVE-2026-9726 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
80
|
CVE-2026-12535 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
80
|
CVE-2026-11913 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | vulnerability in Drupal Mother May I allows . This issue affects Mother May I ve | |
|
80
|
CVE-2026-57724 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Ob | |
|
80
|
CVE-2026-57744 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensio | |
|
80
|
CVE-2026-57770 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography | |
|
80
|
CVE-2026-59518 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist | |
|
80
|
CVE-2026-59544 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions | |
|
80
|
CVE-2026-17561 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Improper Control of Generation of Code ('Code Injection') vulnerability in Innot | |
|
80
|
CVE-2026-28139 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions. | |
|
80
|
CVE-2026-65552 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions. | |
|
80
|
CVE-2026-65556 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1 | |
|
80
|
CVE-2026-65571 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. | |
|
80
|
CVE-2026-65572 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. | |
|
80
|
CVE-2026-65573 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. | |
|
80
|
CVE-2026-65574 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Abogado <= 1.18 versions. | |
|
80
|
CVE-2026-65575 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. | |
|
80
|
CVE-2026-65576 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. | |
|
80
|
CVE-2026-65577 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. | |
|
80
|
CVE-2026-65578 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Agora <= 1.9 versions. | |
|
80
|
CVE-2026-65579 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. | |
|
80
|
CVE-2026-65581 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. | |
|
80
|
CVE-2026-28149 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions. | |
|
80
|
CVE-2026-32470 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions. | |
|
80
|
CVE-2026-73341 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. | |
|
80
|
CVE-2026-73366 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions. | |
|
80
|
CVE-2026-73376 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versi | |
|
80
|
CVE-2026-73380 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions. | |
|
80
|
CVE-2026-73397 |
9.8 | 0.0056 | NET NO AUTH LOW CX NO UI | Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions. | |
|
79
|
CVE-2026-58172 |
9.3 | 0.0056 | NET NO AUTH LOW CX NO UI | Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypa | |
|
78
|
CVE-2026-60053 |
9.1 | 0.0057 | NET NO AUTH LOW CX NO UI | Insufficient Session Expiration vulnerability in Apache Answer. This issue affe | |
|
78
|
CVE-2026-70455 |
8.7 | 0.0057 | NET NO AUTH LOW CX NO UI | rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows | |
|
77
|
CVE-2026-66754 |
8.2 | 0.0056 | NET NO AUTH LOW CX NO UI | Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the | |
|
75
|
CVE-2026-5440 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | A memory exhaustion vulnerability exists in the HTTP server due to unbounded use | |
|
75
|
CVE-2026-4155 |
7.5 | 0.0057 | NET NO AUTH LOW CX NO UI | ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Informat | |
|
69
|
CVE-2026-45311 |
9.6 | 0.0057 | NET NO AUTH LOW CX | CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, t | |
|
69
|
CVE-2026-66395 |
9.4 | 0.0056 | NET NO AUTH LOW CX | SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerabi | |
|
67
|
CVE-2026-67345 |
8.5 | 0.0056 | NET NO AUTH LOW CX | MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirec | |
|
65
|
CVE-2026-3833 |
7.4 | 0.0056 | NET NO AUTH NO UI | A flaw was found in gnutls. This vulnerability occurs because gnutls performs ca |