Hunt List
8,642 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-34456 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Reviactyl is an open-source game server management panel built using Laravel, Re | |
|
80
|
CVE-2026-15704 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled | |
|
80
|
CVE-2025-62818 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Mod | |
|
80
|
CVE-2026-8649 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements in Data Query Logic vulnerability in | |
|
80
|
CVE-2026-119096 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authenti | |
|
80
|
CVE-2026-115245 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly valida | |
|
80
|
CVE-2026-91299 |
10.0 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD | |
|
80
|
CVE-2026-42376 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded tel | |
|
78
|
CVE-2026-93865 |
9.2 | 0.0046 | NET NO AUTH LOW CX NO UI | A missing authentication vulnerability in the Fireware OS FireCluster synchroniz | |
|
78
|
CVE-2026-108357 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
78
|
CVE-2026-45034 |
9.2 | 0.0046 | NET NO AUTH LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
78
|
CVE-2026-114053 |
9.2 | 0.0046 | NET NO AUTH LOW CX NO UI | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs. | |
|
78
|
CVE-2026-7557 |
9.1 | 0.0046 | NET NO AUTH LOW CX NO UI | An improper verification of cryptographic signature vulnerability in the SAML au | |
|
78
|
CVE-2026-70452 |
9.1 | 0.0046 | NET NO AUTH LOW CX NO UI | rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that al | |
|
78
|
CVE-2019-25778 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that | |
|
78
|
CVE-2022-51021 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticat | |
|
77
|
CVE-2026-68494 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv | |
|
77
|
CVE-2026-113582 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references | |
|
77
|
CVE-2026-33752 |
8.6 | 0.0046 | NET NO AUTH LOW CX NO UI | curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not | |
|
77
|
CVE-2026-35064 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated | |
|
77
|
CVE-2026-62302 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | MyTube is a self-hosted downloader and player for several video websites. Prior | |
|
77
|
CVE-2026-115355 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | Mistune before 3.3.0 contains a path traversal vulnerability in the Include dire | |
|
77
|
CVE-2025-34458 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit | |
|
76
|
CVE-2026-45325 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | Gestor de Oferta is a web application for managing mobility service offerings. P | |
|
76
|
CVE-2026-73337 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | Joomla! Core - [20260807] - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and | |
|
75
|
CVE-2025-60570 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the | |
|
75
|
CVE-2026-32605 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake pro | |
|
75
|
CVE-2026-46862 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
75
|
CVE-2026-11823 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to S | |
|
75
|
CVE-2026-8441 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via | |
|
75
|
CVE-2026-51602 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3. | |
|
75
|
CVE-2026-51603 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3. | |
|
75
|
CVE-2026-56285 |
7.7 | 0.0046 | NET NO AUTH LOW CX NO UI | Nitter's /video media proxy endpoint fails to validate target URLs against Twitt | |
|
75
|
CVE-2026-54426 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows | |
|
75
|
CVE-2026-34483 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve | |
|
75
|
CVE-2026-28872 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A resource exhaustion issue was addressed with improved input validation. This i | |
|
75
|
CVE-2026-42583 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Netty is an asynchronous, event-driven network application framework. Prior to 4 | |
|
75
|
CVE-2026-59933 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
75
|
CVE-2026-59932 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
75
|
CVE-2026-96888 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A BIND resolver that is configured with both a "redirect" zone and "qname-minimi | |
|
75
|
CVE-2026-115909 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | zip is a zip library for Rust that supports reading and writing simple ZIP files | |
|
69
|
CVE-2026-76035 |
9.6 | 0.0046 | NET NO AUTH LOW CX | Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0. | |
|
69
|
CVE-2026-33646 |
9.6 | 0.0046 | NET NO AUTH LOW CX | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3. | |
|
68
|
CVE-2026-13885 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Use after free in Skia in Google Chrome on Android prior to 150.0.7871.47 allowe | |
|
68
|
CVE-2026-57713 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events M | |
|
68
|
CVE-2026-28176 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions. | |
|
68
|
CVE-2025-40328 |
8.8 | 0.0046 | NET NO AUTH LOW CX | In the Linux kernel, the following vulnerability has been resolved: smb: client | |
|
65
|
CVE-2026-6902 |
7.7 | 0.0046 | NET NO AUTH LOW CX | A Remote Code Execution vulnerability in P4 (Helix Core) Server's Command-Line C | |
|
64
|
CVE-2026-40160 |
7.1 | 0.0046 | NET NO AUTH LOW CX | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, web_crawl's htt | |
|
58
|
CVE-2026-21582 |
8.8 | 0.0046 | NET NO AUTH | This High severity BASM (Broken Authentication & Session Management) vulnerabili |