Hunt List
8,629 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
90
|
CVE-2026-98432 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | 50 PoC | In the Linux kernel, the following vulnerability has been resolved: ipv4: free |
|
80
|
CVE-2026-16498 |
10.0 | 0.0046 | NET NO AUTH LOW CX NO UI | The terraform-mcp-server before version 1.1.0 is vulnerable to a cross-tenant cr | |
|
80
|
CVE-2026-14121 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 al | |
|
80
|
CVE-2026-99078 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
80
|
CVE-2026-99079 |
9.8 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
80
|
CVE-2023-54223 |
9.8 | 0.0045 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: | |
|
79
|
CVE-2026-86577 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integ | |
|
79
|
CVE-2026-33784 |
9.3 | 0.0046 | NET NO AUTH LOW CX NO UI | A Use of Default Password vulnerability in the Juniper Networks Support Insigh | |
|
79
|
CVE-2026-61203 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle People | |
|
79
|
CVE-2026-71166 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2026-71167 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2026-73920 |
9.4 | 0.0046 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
79
|
CVE-2023-54342 |
9.3 | 0.0046 | NET NO AUTH LOW CX NO UI | Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution v | |
|
79
|
CVE-2026-76932 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76933 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76936 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-76937 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System | |
|
79
|
CVE-2026-82122 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB S | |
|
79
|
CVE-2026-86575 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects J | |
|
79
|
CVE-2026-86576 |
9.4 | 0.0045 | NET NO AUTH LOW CX NO UI | Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP | |
|
79
|
CVE-2026-56067 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions. | |
|
79
|
CVE-2026-57702 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-67324 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> | |
|
79
|
CVE-2026-16626 |
9.3 | 0.0045 | NET NO AUTH LOW CX NO UI | Improper restriction of XML external entity reference vulnerability (unauthentic | |
|
77
|
CVE-2026-93434 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication | |
|
77
|
CVE-2026-46391 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in | |
|
77
|
CVE-2026-114102 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unau | |
|
77
|
CVE-2026-115506 |
8.7 | 0.0046 | NET NO AUTH LOW CX NO UI | libexpat through 2.9.0 contains a denial of service vulnerability because billio | |
|
75
|
CVE-2026-45617 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | LiquidJS is a Shopify/GitHub Pages compatible template engine written in pure Ja | |
|
75
|
CVE-2026-56455 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to | |
|
75
|
CVE-2026-14970 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing dur | |
|
75
|
CVE-2026-107026 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Insecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unaut | |
|
75
|
CVE-2026-23451 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: bonding: pr | |
|
75
|
CVE-2026-93904 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin | |
|
75
|
CVE-2026-99030 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: skbuff | |
|
75
|
CVE-2026-119290 |
7.5 | 0.0046 | NET NO AUTH LOW CX NO UI | Zuke is a code-first, strongly typed build automation system for Deno. Prior to | |
|
75
|
CVE-2026-54737 |
7.3 | 0.0046 | NET NO AUTH LOW CX NO UI | @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preserva | |
|
75
|
CVE-2026-61611 |
7.5 | 0.0045 | NET NO AUTH LOW CX NO UI | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v | |
|
68
|
CVE-2026-113239 |
8.8 | 0.0046 | NET NO AUTH LOW CX | Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078. | |
|
68
|
CVE-2026-92206 |
8.8 | 0.0046 | NET NO AUTH LOW CX | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vu | |
|
68
|
CVE-2026-16760 |
8.8 | 0.0046 | NET NO AUTH LOW CX | In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle | |
|
68
|
CVE-2026-53915 |
8.8 | 0.0045 | NET NO AUTH LOW CX | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untru | |
|
68
|
CVE-2026-16418 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Stack buffer overflow in V8 in Google Chrome prior to 150.0.7871.182 allowed a r | |
|
68
|
CVE-2026-17935 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a | |
|
68
|
CVE-2026-113243 |
8.8 | 0.0045 | NET NO AUTH LOW CX | Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
66
|
CVE-2026-59545 |
8.1 | 0.0046 | NET NO AUTH NO UI | Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 | |
|
65
|
CVE-2026-49287 |
7.4 | 0.0046 | NET NO AUTH NO UI | Statamic is a Laravel and Git powered content management system (CMS). Prior to | |
|
65
|
CVE-2026-12581 |
7.7 | 0.0045 | NET NO AUTH LOW CX | EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unau | |
|
65
|
CVE-2026-96778 |
7.7 | 0.0045 | NET NO AUTH LOW CX | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() | |
|
64
|
CVE-2026-28941 |
7.1 | 0.0046 | NET NO AUTH LOW CX | The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 |