Hunt List
8,661 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-107081 |
9.8 | 0.0049 | NET NO AUTH LOW CX NO UI | SQL injection via identifier injection in the tableName and tableFields POST par | |
|
80
|
CVE-2026-107058 |
9.8 | 0.0049 | NET NO AUTH LOW CX NO UI | An issue in Shelter versionCode 445 allows attackers to register their own auth_ | |
|
79
|
CVE-2026-80098 |
9.3 | 0.0049 | NET NO AUTH LOW CX NO UI | Improper verification of cryptographic signature in Copilot Studio allows an una | |
|
79
|
CVE-2026-41551 |
9.3 | 0.0049 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected ve | |
|
78
|
CVE-2026-34002 |
9.1 | 0.0049 | NET NO AUTH LOW CX NO UI | A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds rea | |
|
78
|
CVE-2026-61435 |
8.8 | 0.0049 | NET NO AUTH LOW CX NO UI | PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent | |
|
78
|
CVE-2026-86868 |
9.1 | 0.0049 | NET NO AUTH LOW CX NO UI | An authentication issue was addressed with improved state management. This issue | |
|
77
|
CVE-2026-66360 |
8.7 | 0.0049 | NET NO AUTH LOW CX NO UI | The ISO Presentation layer contains a flaw in the handling of specific paramete | |
|
77
|
CVE-2026-63383 |
8.7 | 0.0049 | NET NO AUTH LOW CX NO UI | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libe | |
|
77
|
CVE-2024-58382 |
8.7 | 0.0049 | NET NO AUTH LOW CX NO UI | league/commonmark versions before 2.6.0 contain polynomial time complexity vulne | |
|
76
|
CVE-2026-55575 |
8.2 | 0.0049 | NET NO AUTH LOW CX NO UI | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScri | |
|
75
|
CVE-2026-8446 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerabi | |
|
75
|
CVE-2026-56017 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer | |
|
75
|
CVE-2026-57080 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion v | |
|
75
|
CVE-2026-57081 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion v | |
|
75
|
CVE-2026-57585 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1. | |
|
75
|
CVE-2026-52197 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | An issue in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to | |
|
75
|
CVE-2026-49145 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from | |
|
75
|
CVE-2026-49147 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequ | |
|
75
|
CVE-2026-40007 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apach | |
|
75
|
CVE-2026-40454 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ | |
|
75
|
CVE-2026-47479 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac | |
|
75
|
CVE-2026-47480 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac | |
|
75
|
CVE-2026-47482 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attac | |
|
75
|
CVE-2026-44433 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Quicly is an IETF QUIC protocol implementation intended primarily for use within | |
|
75
|
CVE-2026-44435 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Quicly is an IETF QUIC protocol implementation intended primarily for use within | |
|
75
|
CVE-2026-42566 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b | |
|
75
|
CVE-2026-47249 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1 | |
|
75
|
CVE-2026-52878 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1 | |
|
75
|
CVE-2026-52879 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. In version | |
|
75
|
CVE-2026-52880 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions f | |
|
75
|
CVE-2026-73568 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 | |
|
75
|
CVE-2026-73643 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing | |
|
75
|
CVE-2026-107039 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGu | |
|
75
|
CVE-2026-63955 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: | |
|
75
|
CVE-2026-115887 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | GraphQL Scalars is a library of custom GraphQL scalars for creating precise type | |
|
75
|
CVE-2026-13351 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Zephyr's IPv6 network stack can be prevented from receiving or processing future | |
|
75
|
CVE-2026-48044 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Envoy is an open source edge and service proxy designed for cloud-native applica | |
|
75
|
CVE-2026-101810 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
75
|
CVE-2026-110678 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffer | |
|
75
|
CVE-2026-110676 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encodi | |
|
74
|
CVE-2026-57209 |
7.0 | 0.0049 | NET NO AUTH LOW CX NO UI | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision serv | |
|
67
|
CVE-2026-42557 |
8.6 | 0.0049 | NET NO AUTH LOW CX | jupyterlab is an extensible environment for interactive and reproducible computi | |
|
67
|
CVE-2026-118683 |
8.6 | 0.0049 | NET NO AUTH LOW CX | MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in | |
|
66
|
CVE-2026-50143 |
8.1 | 0.0049 | NET NO AUTH LOW CX | The Apify MCP server enables AI agents to extract data from websites using ready | |
|
65
|
CVE-2026-49857 |
7.4 | 0.0049 | NET NO AUTH LOW CX | auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authe | |
|
65
|
CVE-2026-66041 |
7.7 | 0.0049 | NET NO AUTH LOW CX | FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds | |
|
57
|
CVE-2026-17653 |
8.3 | 0.0049 | NET NO AUTH | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
55
|
CVE-2026-13794 |
7.5 | 0.0049 | NET NO AUTH | Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on | |
|
55
|
CVE-2026-55415 |
7.5 | 0.0049 | NET NO AUTH | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, a |