Hunt List
8,549 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-53412 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client fo | |
|
80
|
CVE-2026-79858 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AO | |
|
80
|
CVE-2026-15982 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Too | |
|
80
|
CVE-2025-60355 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template | |
|
80
|
CVE-2026-63808 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: exfat: fix | |
|
80
|
CVE-2026-65145 |
10.0 | 0.0053 | NET NO AUTH LOW CX NO UI | NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause | |
|
80
|
CVE-2026-54859 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. | |
|
80
|
CVE-2026-61567 |
10.0 | 0.0053 | NET NO AUTH LOW CX NO UI | AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint | |
|
80
|
CVE-2026-57692 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Priv | |
|
80
|
CVE-2026-14446 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access con | |
|
79
|
CVE-2026-115812 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Relative path traversal during model archive extraction in Amazon Web Services M | |
|
79
|
CVE-2025-40771 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) | |
|
79
|
CVE-2026-55445 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Qinglong is a timed task management platform supporting Python3, JavaScript, She | |
|
79
|
CVE-2026-114108 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vul | |
|
79
|
CVE-2026-15378 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | A flaw was found in the `guardrails-detectors` component. This vulnerability all | |
|
79
|
CVE-2026-5189 |
9.2 | 0.0053 | NET NO AUTH LOW CX NO UI | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager vers | |
|
79
|
CVE-2026-93328 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Path Traversal and Missing Authorization in cloud-storage source in Google Cloud | |
|
79
|
CVE-2023-22793 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | A vulnerability allowing an unauthenticated attacker to perform remote code exec | |
|
78
|
CVE-2026-72575 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | An improper authorization vulnerability in daptin through v0.12.34 allows unauth | |
|
78
|
CVE-2026-112399 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate | |
|
78
|
CVE-2026-18670 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
78
|
CVE-2025-68809 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: | |
|
78
|
CVE-2012-20002 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path trav | |
|
78
|
CVE-2016-20100 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path trav | |
|
78
|
CVE-2026-45689 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | Rocket.Chat is an open-source, secure, fully customizable communications platfor | |
|
78
|
CVE-2026-11403 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key g | |
|
77
|
CVE-2026-15583 |
8.6 | 0.0053 | NET NO AUTH LOW CX NO UI | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote at | |
|
77
|
CVE-2026-48763 |
8.2 | 0.0053 | NET NO AUTH LOW CX NO UI | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated | |
|
75
|
CVE-2026-55760 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | Handlebars.java provides logic-less and semantic Mustache templates with Java. P | |
|
75
|
CVE-2026-75887 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | A flaw was found in the OpenShift console. An unauthenticated attacker can explo | |
|
75
|
CVE-2026-24146 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server contains a vulnerability where insufficient input | |
|
75
|
CVE-2026-112365 |
7.2 | 0.0053 | NET NO AUTH LOW CX NO UI | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hi | |
|
75
|
CVE-2026-44840 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, | |
|
75
|
CVE-2026-47477 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac | |
|
75
|
CVE-2026-47478 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac | |
|
75
|
CVE-2026-98965 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ice: Restor | |
|
75
|
CVE-2026-99046 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: gve: fix XS | |
|
75
|
CVE-2026-119195 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string | |
|
75
|
CVE-2026-72689 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | A broken object-level authorization vulnerability in OpenSignLabs opensignserver | |
|
75
|
CVE-2025-66974 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Applic | |
|
69
|
CVE-2026-62834 |
9.3 | 0.0053 | NET NO AUTH LOW CX | Improper verification of cryptographic signature in Azure Data Factory allows an | |
|
68
|
CVE-2026-113080 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113103 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113163 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-113230 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 all | |
|
67
|
CVE-2026-55665 |
8.5 | 0.0053 | NET NO AUTH LOW CX | Grist is spreadsheet software using Python as its formula language. Prior to 1.7 | |
|
67
|
CVE-2026-56876 |
8.6 | 0.0053 | NET NO AUTH LOW CX | extract-zip does not validate symlink targets when extracting zip archives. When | |
|
64
|
CVE-2026-69244 |
7.1 | 0.0053 | NET NO AUTH LOW CX | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | |
|
64
|
CVE-2026-47723 |
7.1 | 0.0053 | NET NO AUTH LOW CX | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private | |
|
55
|
CVE-2026-19176 |
7.5 | 0.0053 | NET NO AUTH | Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote |