Hunt List
7,833 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-49060 |
9.8 | 0.0184 | NET NO AUTH LOW CX NO UI | Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerc | |
|
80
|
CVE-2026-44359 |
10.0 | 0.0180 | NET NO AUTH LOW CX NO UI | Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1 | |
|
80
|
CVE-2026-73299 |
10.0 | 0.0178 | NET NO AUTH LOW CX NO UI | Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and | |
|
80
|
CVE-2026-13206 |
9.8 | 0.0177 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an OS command ('OS command i | |
|
79
|
CVE-2026-58126 |
9.3 | 0.0184 | NET NO AUTH LOW CX NO UI | PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulne | |
|
79
|
CVE-2026-4810 |
9.3 | 0.0182 | NET NO AUTH LOW CX NO UI | A Code Injection and Missing Authentication vulnerability in Google Agent Develo | |
|
78
|
CVE-2026-5995 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacte | |
|
78
|
CVE-2026-5996 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191 | |
|
78
|
CVE-2026-6115 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the | |
|
78
|
CVE-2026-6131 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. Affected by | |
|
78
|
CVE-2026-6138 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted ele | |
|
78
|
CVE-2026-6139 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This af | |
|
78
|
CVE-2026-6154 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th | |
|
78
|
CVE-2026-6156 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191 | |
|
78
|
CVE-2026-7538 |
8.9 | 0.0182 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This iss | |
|
78
|
CVE-2026-5975 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The imp | |
|
78
|
CVE-2026-5976 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th | |
|
78
|
CVE-2026-5993 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vu | |
|
78
|
CVE-2026-5994 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. Th | |
|
78
|
CVE-2026-5997 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impac | |
|
78
|
CVE-2026-6113 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191 | |
|
78
|
CVE-2026-6114 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected | |
|
78
|
CVE-2026-6116 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vu | |
|
78
|
CVE-2026-6155 |
8.9 | 0.0180 | NET NO AUTH LOW CX NO UI | A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted elem | |
|
78
|
CVE-2026-7823 |
8.9 | 0.0179 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Aff | |
|
78
|
CVE-2026-7037 |
8.9 | 0.0179 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. Thi | |
|
78
|
CVE-2026-7154 |
8.9 | 0.0179 | NET NO AUTH LOW CX NO UI | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. This aff | |
|
78
|
CVE-2026-7156 |
8.9 | 0.0179 | NET NO AUTH LOW CX NO UI | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected i | |
|
78
|
CVE-2026-44177 |
8.8 | 0.0177 | NET NO AUTH LOW CX NO UI | Kirby is an open-source content management system. In versions 5.3.0 and above b | |
|
78
|
CVE-2026-5978 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191 | |
|
78
|
CVE-2026-6112 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affecte | |
|
78
|
CVE-2026-7122 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. This imp | |
|
78
|
CVE-2026-7123 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. Affected is t | |
|
78
|
CVE-2026-7124 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. Affected | |
|
78
|
CVE-2026-7125 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. Affected | |
|
78
|
CVE-2026-7136 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected | |
|
78
|
CVE-2026-7137 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b202005 | |
|
78
|
CVE-2026-7138 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulne | |
|
78
|
CVE-2026-7139 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affect | |
|
78
|
CVE-2026-7140 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted | |
|
78
|
CVE-2026-7152 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affe | |
|
78
|
CVE-2026-7153 |
8.9 | 0.0177 | NET NO AUTH LOW CX NO UI | A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. The | |
|
77
|
CVE-2026-63362 |
8.2 | 0.0182 | NET NO AUTH LOW CX NO UI | An unsigned integer underflow in the PubSub signature verification path in open | |
|
75
|
CVE-2026-9776 |
7.5 | 0.0185 | NET NO AUTH LOW CX NO UI | ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Discl | |
|
75
|
CVE-2023-27530 |
7.5 | 0.0183 | NET NO AUTH LOW CX NO UI | A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 | |
|
75
|
CVE-2026-50776 |
7.5 | 0.0180 | NET NO AUTH LOW CX NO UI | Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 | |
|
69
|
CVE-2026-41264 |
9.2 | 0.0179 | NET NO AUTH NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
69
|
CVE-2026-63305 |
9.2 | 0.0177 | NET NO AUTH NO UI | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg | |
|
68
|
CVE-2026-7838 |
8.7 | 0.0187 | NET NO AUTH LOW CX | UltraVNC viewer through 1.8.2.2 contains an integer overflow leading to a heap b | |
|
66
|
CVE-2026-63108 |
7.7 | 0.0177 | NET NO AUTH LOW CX | Roo Code through 3.54.0 contains a command injection vulnerability in the auto-a |