Hunt List
8,568 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-65884 |
10.0 | 0.0052 | NET NO AUTH LOW CX NO UI | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The | |
|
80
|
CVE-2026-65887 |
10.0 | 0.0052 | NET NO AUTH LOW CX NO UI | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gri | |
|
80
|
CVE-2026-65888 |
10.0 | 0.0052 | NET NO AUTH LOW CX NO UI | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.2 | |
|
80
|
CVE-2026-103406 |
9.8 | 0.0052 | NET NO AUTH LOW CX NO UI | An Improper Neutralization of Special Elements used in an OS Command vulnerabili | |
|
80
|
CVE-2026-55572 |
10.0 | 0.0052 | NET NO AUTH LOW CX NO UI | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth | |
|
80
|
CVE-2026-30993 |
9.8 | 0.0052 | NET NO AUTH LOW CX NO UI | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE | |
|
80
|
CVE-2023-0745 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The High Availability functionality of Yugabyte An | |
|
80
|
CVE-2026-16407 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Service Workers component. This vulnerability was | |
|
80
|
CVE-2026-99154 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: libis | |
|
80
|
CVE-2026-74406 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix | |
|
80
|
CVE-2026-89652 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: bound | |
|
80
|
CVE-2026-90037 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFSD: Preve | |
|
80
|
CVE-2024-51311 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51313 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51312 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51314 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51315 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
79
|
CVE-2026-8980 |
9.3 | 0.0052 | NET NO AUTH LOW CX NO UI | The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privile | |
|
79
|
CVE-2026-64622 |
9.3 | 0.0052 | NET NO AUTH LOW CX NO UI | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the co | |
|
79
|
CVE-2024-58307 |
9.3 | 0.0051 | NET NO AUTH LOW CX NO UI | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the member | |
|
78
|
CVE-2026-19426 |
8.8 | 0.0052 | NET NO AUTH LOW CX NO UI | POS System developed by FitSoft has a Missing Authentication vulnerability. Unau | |
|
78
|
CVE-2026-6918 |
8.7 | 0.0052 | NET NO AUTH LOW CX NO UI | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker ca | |
|
78
|
CVE-2026-16762 |
8.7 | 0.0052 | NET NO AUTH LOW CX NO UI | An attacker able to supply a crafted XML document to an application using QXmlSt | |
|
78
|
CVE-2026-89650 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: bound | |
|
78
|
CVE-2026-19424 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Refe | |
|
78
|
CVE-2026-73622 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | GitPython before 3.1.55 fails to disable environment variable expansion in Remot | |
|
77
|
CVE-2026-70476 |
8.3 | 0.0052 | NET NO AUTH LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
75
|
CVE-2026-24173 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server contains a vulnerability where an attacker could | |
|
75
|
CVE-2026-24174 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server contains a vulnerability where an attacker could | |
|
75
|
CVE-2026-55380 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageF | |
|
75
|
CVE-2026-99081 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fi | |
|
75
|
CVE-2026-15574 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | A flaw was found in the vllm-orchestrator-gateway component. The system's produc | |
|
75
|
CVE-2026-16376 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Denial-of-service in the Graphics: WebGPU component. This vulnerability was fixe | |
|
75
|
CVE-2026-16409 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Invalid pointer in the Security: PSM component. This vulnerability was fixed in | |
|
75
|
CVE-2026-47667 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | CImg Library is a C++ library for image processing. Prior to version 4.0.0 in `_ | |
|
75
|
CVE-2026-41135 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source | |
|
75
|
CVE-2026-12691 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Vimesoft Inc. Ente | |
|
75
|
CVE-2026-15322 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to | |
|
75
|
CVE-2026-10686 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Zephyr's IPv6 forwarding path re-sent routed unicast packets without ever decrem | |
|
75
|
CVE-2026-52481 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attack | |
|
75
|
CVE-2026-33257 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | An attacker can send a web request that causes unlimited memory allocation in th | |
|
75
|
CVE-2026-44240 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable | |
|
75
|
CVE-2026-88041 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information | |
|
68
|
CVE-2026-112994 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113147 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 al | |
|
66
|
CVE-2026-70465 |
8.1 | 0.0052 | NET NO AUTH NO UI | A buffer copy without checking size of input ('classic buffer overflow') vulnera | |
|
66
|
CVE-2026-99064 |
8.1 | 0.0052 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: cipso: adju | |
|
66
|
CVE-2026-34783 |
8.1 | 0.0051 | NET NO AUTH LOW CX | Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4 | |
|
66
|
CVE-2026-71407 |
8.1 | 0.0051 | NET NO AUTH NO UI | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet | |
|
65
|
CVE-2026-96187 |
7.4 | 0.0051 | NET NO AUTH LOW CX | Access of resource using incompatible type ('type confusion') in Microsoft Edge |