Hunt List
8,658 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-49781 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions. | |
|
80
|
CVE-2025-65656 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/E | |
|
80
|
CVE-2026-28911 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in ma | |
|
80
|
CVE-2025-68745 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x | |
|
80
|
CVE-2026-56451 |
10.0 | 0.0050 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in Opcenter X (All versions < V2604). Affect | |
|
80
|
CVE-2026-59500 |
10.0 | 0.0050 | NET NO AUTH LOW CX NO UI | : Improper Authentication vulnerability in Priority Portal Generator addon to Pr | |
|
80
|
CVE-2026-7664 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to ac | |
|
80
|
CVE-2026-66587 |
9.8 | 0.0050 | NET NO AUTH LOW CX NO UI | Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. | |
|
79
|
CVE-2026-6885 |
9.3 | 0.0050 | NET NO AUTH LOW CX NO UI | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has | |
|
78
|
CVE-2026-71263 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTC | |
|
78
|
CVE-2026-53791 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that all | |
|
78
|
CVE-2026-93228 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Re | |
|
78
|
CVE-2026-34543 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | OpenEXR provides the specification and reference implementation of the EXR file | |
|
78
|
CVE-2026-25199 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Instances deployed via the Proxmox extension allow unauthorized access to instan | |
|
78
|
CVE-2026-107015 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized a | |
|
78
|
CVE-2026-107032 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allo | |
|
78
|
CVE-2026-44761 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented | |
|
78
|
CVE-2026-41552 |
9.2 | 0.0050 | NET NO AUTH LOW CX NO UI | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to | |
|
78
|
CVE-2026-62849 |
9.1 | 0.0050 | NET NO AUTH LOW CX NO UI | ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL | |
|
77
|
CVE-2026-56675 |
8.3 | 0.0050 | NET NO AUTH LOW CX NO UI | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback r | |
|
77
|
CVE-2026-58013 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line | |
|
77
|
CVE-2026-60114 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | Sustainable Irrigation Platform (SIP) through version 5.2.16 contains a path tra | |
|
77
|
CVE-2026-47394 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GH | |
|
77
|
CVE-2015-20124 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path trave | |
|
77
|
CVE-2024-58396 |
8.7 | 0.0050 | NET NO AUTH LOW CX NO UI | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerabili | |
|
77
|
CVE-2026-72581 |
8.6 | 0.0050 | NET NO AUTH LOW CX NO UI | A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through | |
|
77
|
CVE-2026-102560 |
8.6 | 0.0050 | NET NO AUTH LOW CX NO UI | A flaw was found in libsoup. When the permessage-deflate WebSocket extension com | |
|
76
|
CVE-2026-114400 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | Trudesk through 1.2.11 contains a missing authentication vulnerability that allo | |
|
76
|
CVE-2026-116634 |
8.2 | 0.0050 | NET NO AUTH LOW CX NO UI | OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability t | |
|
75
|
CVE-2026-64312 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: crypto: pcr | |
|
75
|
CVE-2026-115776 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | Twisted is an event-based framework for internet applications, supporting Python | |
|
75
|
CVE-2026-55727 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | A flaw in the authentication mechanism for video stream requests in Genetec Secu | |
|
75
|
CVE-2026-56846 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade | |
|
75
|
CVE-2026-72438 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: md/raid10: | |
|
75
|
CVE-2026-13182 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-st | |
|
75
|
CVE-2026-13183 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload me | |
|
75
|
CVE-2026-61609 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | Pterodactyl is a free, open-source game server management panel. From 1.7.0 unti | |
|
75
|
CVE-2026-82210 |
7.5 | 0.0050 | NET NO AUTH LOW CX NO UI | Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) | |
|
69
|
CVE-2026-8338 |
9.2 | 0.0050 | NET NO AUTH NO UI | A Spring Security authentication and authorization bypass exists in Coverity Con | |
|
68
|
CVE-2026-14431 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote at | |
|
68
|
CVE-2026-15776 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allo | |
|
68
|
CVE-2026-13105 |
8.8 | 0.0050 | NET NO AUTH LOW CX | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip | |
|
68
|
CVE-2026-74946 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Information disclosure due to incorrect boundary conditions in the Graphics: Can | |
|
68
|
CVE-2026-8517 |
8.8 | 0.0050 | NET NO AUTH LOW CX | Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.1 | |
|
67
|
CVE-2026-66494 |
8.7 | 0.0050 | NET NO AUTH LOW CX | Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API end | |
|
66
|
CVE-2026-47398 |
8.1 | 0.0050 | NET NO AUTH NO UI | PraisonAI is a multi-agent teams system. The v4.6.32 chokepoint refactor (which | |
|
66
|
CVE-2026-33833 |
8.2 | 0.0050 | NET NO AUTH LOW CX | Improper neutralization of special elements in output used by a downstream compo | |
|
65
|
CVE-2026-48079 |
7.4 | 0.0050 | NET NO AUTH NO UI | OpenReception's appointment booking software provides an end-to-end encrypted ap | |
|
65
|
CVE-2026-62669 |
7.4 | 0.0050 | NET NO AUTH NO UI | Grav Login Plugin adds login, basic ACL, and session wide messages to Grav. Prio | |
|
58
|
CVE-2026-19004 |
8.8 | 0.0050 | NET NO AUTH | An application using the MongoDB BI Connector ODBC Driver may experience a memor |