Hunt List
8,635 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-112241 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart sur | |
|
80
|
CVE-2026-20156 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-14960 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionali | |
|
80
|
CVE-2026-102649 |
9.9 | 0.0046 | NET NO AUTH LOW CX NO UI | Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes oper | |
|
80
|
CVE-2026-4277 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4 | |
|
79
|
CVE-2026-12693 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. | |
|
79
|
CVE-2026-116214 |
9.3 | 0.0046 | NET NO AUTH LOW CX NO UI | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability | |
|
78
|
CVE-2026-32327 |
9.1 | 0.0046 | NET NO AUTH LOW CX NO UI | A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack ag | |
|
78
|
CVE-2026-54218 |
8.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamD | |
|
77
|
CVE-2026-12245 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS c | |
|
77
|
CVE-2026-9716 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | CWE-476 NULL Pointer Dereference vulnerability exists that could cause a denial- | |
|
77
|
CVE-2026-57023 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | An Improper Validation of Specified Quantity in Input vulnerability in the TCP p | |
|
77
|
CVE-2026-57026 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | An Improper Validation of Syntactic Correctness of Input vulnerability in the SI | |
|
77
|
CVE-2026-62328 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | 9Router through version 0.4.41 contain an unauthenticated information disclosure | |
|
77
|
CVE-2026-50032 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | A NULL pointer dereference in the MMS Write Named Variable List handler, which m | |
|
77
|
CVE-2026-54609 |
8.6 | 0.0046 | NET NO AUTH LOW CX NO UI | QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol libra | |
|
77
|
CVE-2026-69089 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium::watermar | |
|
77
|
CVE-2026-64649 |
8.3 | 0.0046 | NET NO AUTH LOW CX NO UI | Next.js is a React framework for building full-stack web applications. In versio | |
|
77
|
CVE-2026-50039 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | The affected product is vulnerable to a stack-based buffer overflow, which may a | |
|
76
|
CVE-2026-59252 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unau | |
|
76
|
CVE-2026-55735 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | Improper Verification of Cryptographic Signature in ueberauth guardian allows an | |
|
76
|
CVE-2026-116540 |
8.2 | 0.0046 | NET NO AUTH LOW CX NO UI | netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contai | |
|
75
|
CVE-2026-20649 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A logging issue was addressed with improved data redaction. This issue is fixed | |
|
75
|
CVE-2026-11576 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error h | |
|
75
|
CVE-2026-48712 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior t | |
|
75
|
CVE-2026-53539 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, wh | |
|
75
|
CVE-2026-14193 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | DVP80ES300T with Improper Validation of Array Index Vulnerability | |
|
75
|
CVE-2026-12575 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | DVP80ES3 with Improper Resource Shutdown or Release vulnerability. | |
|
75
|
CVE-2026-54712 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation a | |
|
75
|
CVE-2026-15053 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Tanium addressed a denial of service vulnerability in Tanium Server. | |
|
75
|
CVE-2026-21729 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Loki queries with large limits can cause large memory allocations which can impa | |
|
75
|
CVE-2026-59531 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 v | |
|
75
|
CVE-2026-15057 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerab | |
|
75
|
CVE-2026-47219 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | find-my-way is a framework-independent HTTP router that internally uses a Radix | |
|
75
|
CVE-2026-71202 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The raster Rust crate's crop function (src/editor.rs) clamps the crop width/heig | |
|
75
|
CVE-2026-48702 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Rekor is a software supply chain transparency log. Starting in version 0.3.0 and | |
|
75
|
CVE-2026-73997 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2 | |
|
75
|
CVE-2026-70906 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Java SE (component: 2D). Supported versions that are af | |
|
75
|
CVE-2026-94640 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated | |
|
75
|
CVE-2026-84747 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Interpretation conflict in the HTTP protocol implementation in Apache bRPC (vers | |
|
75
|
CVE-2026-56833 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4. | |
|
75
|
CVE-2026-108088 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vu | |
|
75
|
CVE-2026-39734 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. | |
|
75
|
CVE-2026-50645 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | There is no restriction on the amount of attachment headers that a message can c | |
|
75
|
CVE-2026-13753 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Certain HP DeskJet All-in-One printers may be potentially vulnerable to informat | |
|
75
|
CVE-2026-113729 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Moov signedxml is a pure Go library for processing signed XML documents. Prior t | |
|
66
|
CVE-2026-46851 |
8.1 | 0.0046 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle | |
|
66
|
CVE-2026-70468 |
8.1 | 0.0046 | NET NO AUTH NO UI | A authentication bypass using an alternate path or channel vulnerability in Fort | |
|
65
|
CVE-2026-55790 |
7.4 | 0.0046 | NET NO AUTH LOW CX | Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5. | |
|
64
|
CVE-2026-9856 |
7.1 | 0.0046 | NET NO AUTH LOW CX | A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an atta |