Hunt List
8,549 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-6023 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the R | |
|
80
|
CVE-2026-9711 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full | |
|
80
|
CVE-2026-61564 |
10.0 | 0.0054 | NET NO AUTH LOW CX NO UI | AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installe | |
|
80
|
CVE-2026-101809 |
10.0 | 0.0054 | NET NO AUTH LOW CX NO UI | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor | |
|
80
|
CVE-2026-43125 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: dlm: valida | |
|
80
|
CVE-2026-42369 |
10.0 | 0.0054 | NET NO AUTH LOW CX NO UI | GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surve | |
|
80
|
CVE-2026-16326 |
10.0 | 0.0054 | NET NO AUTH LOW CX NO UI | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate sessio | |
|
80
|
CVE-2026-101484 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supporte | |
|
80
|
CVE-2026-35490 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | changedetection.io is a free open source web page change detection tool. Prior t | |
|
79
|
CVE-2026-39920 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | BridgeHead FileStore versions prior to 24A (released in early 2024) expose the A | |
|
79
|
CVE-2026-19001 |
9.5 | 0.0054 | NET NO AUTH LOW CX NO UI | The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-siz | |
|
79
|
CVE-2025-6519 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY | |
|
79
|
CVE-2026-15143 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | A flaw was found in the file_type content detector of guardrails-detectors. This | |
|
79
|
CVE-2026-24444 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 con | |
|
78
|
CVE-2026-59139 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read v | |
|
78
|
CVE-2026-59140 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds rea | |
|
78
|
CVE-2026-59141 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::RadixTree::Shared versions before 0.02 for Perl allow an out-of-bounds rea | |
|
78
|
CVE-2026-59142 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::HashMap::Shared versions before 0.14 for Perl allow an out-of-bounds read | |
|
78
|
CVE-2026-59145 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read v | |
|
78
|
CVE-2026-51119 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileg | |
|
78
|
CVE-2026-17552 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary h | |
|
78
|
CVE-2026-47683 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLi | |
|
78
|
CVE-2026-40005 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v | |
|
78
|
CVE-2023-54347 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows a | |
|
78
|
CVE-2026-42952 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | Previously, there was no throttling on repeated authentication attempts to the | |
|
78
|
CVE-2026-16393 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerabil | |
|
78
|
CVE-2018-25438 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path trave | |
|
77
|
CVE-2026-27400 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. | |
|
77
|
CVE-2026-68791 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Incorrect authorization in Azure Machine Learning allows an unauthorized attacke | |
|
77
|
CVE-2026-78501 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in a command ('command injectio | |
|
77
|
CVE-2026-48032 |
8.3 | 0.0054 | NET NO AUTH LOW CX NO UI | Hulumi is an open-source toolkit that ships secure-by-default cloud and platform | |
|
77
|
CVE-2026-58499 |
8.2 | 0.0054 | NET NO AUTH LOW CX NO UI | EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to p | |
|
77
|
CVE-2026-116682 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5 | |
|
77
|
CVE-2026-40073 |
8.2 | 0.0054 | NET NO AUTH LOW CX NO UI | SvelteKit is a framework for rapidly developing robust, performant web applicati | |
|
75
|
CVE-2026-73197 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this | |
|
75
|
CVE-2026-73198 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vu | |
|
75
|
CVE-2026-115778 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Twisted is an event-based framework for internet applications, supporting Python | |
|
75
|
CVE-2026-20346 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A vulnerability in the PDF file format parser of ClamAV could allow an unauthent | |
|
75
|
CVE-2026-5497 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of | |
|
75
|
CVE-2026-47476 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac | |
|
75
|
CVE-2026-72545 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | An insecure direct object reference vulnerability in OpenSignLabs OpenSign throu | |
|
75
|
CVE-2026-72605 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticat | |
|
69
|
CVE-2026-65048 |
9.3 | 0.0054 | NET NO AUTH LOW CX | Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unau | |
|
68
|
CVE-2026-26944 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release ver | |
|
68
|
CVE-2026-112623 |
8.8 | 0.0054 | NET NO AUTH LOW CX | A use-after-free issue was addressed with improved memory management. This issue | |
|
68
|
CVE-2026-112651 |
8.8 | 0.0054 | NET NO AUTH LOW CX | A use-after-free issue was addressed with improved memory management. This issue | |
|
68
|
CVE-2026-13749 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Improper neutralization in the Snowpark annotation processor callback template i | |
|
68
|
CVE-2026-98171 |
8.8 | 0.0054 | NET NO AUTH LOW CX | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
68
|
CVE-2026-14334 |
8.8 | 0.0054 | NET NO AUTH LOW CX | The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 | |
|
66
|
CVE-2026-64665 |
8.1 | 0.0054 | NET NO AUTH NO UI | Statamic is a Laravel and Git powered content management system (CMS). Prior to |