Hunt List
8,549 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-41409 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incom | |
|
79
|
CVE-2026-56081 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Cap-go before 12.128.2 contains an authentication logic flaw that lets an attack | |
|
79
|
CVE-2026-103594 |
9.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configura | |
|
79
|
CVE-2026-45010 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.2 contains an improper restriction of excessive authenticati | |
|
78
|
CVE-2026-72798 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to properly filter related-database content i | |
|
78
|
CVE-2026-46777 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
78
|
CVE-2015-20120 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL in | |
|
78
|
CVE-2026-86411 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP co | |
|
78
|
CVE-2026-72804 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph | |
|
78
|
CVE-2026-116014 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStr | |
|
78
|
CVE-2026-16370 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed | |
|
78
|
CVE-2026-16380 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Networking component. This vulnerability was fixed in F | |
|
78
|
CVE-2026-16394 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Security component. This vulnerability was fixed i | |
|
78
|
CVE-2026-16406 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Networking component. This vulnerability was fixed in F | |
|
77
|
CVE-2026-59874 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar | |
|
77
|
CVE-2026-74034 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgra | |
|
77
|
CVE-2026-53430 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability i | |
|
77
|
CVE-2026-57877 |
8.6 | 0.0043 | NET NO AUTH LOW CX NO UI | An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-L | |
|
77
|
CVE-2025-11573 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a | |
|
77
|
CVE-2026-75840 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the Graa | |
|
77
|
CVE-2026-63566 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Memory allocation with excessive size value in the DTLS handshake reassembly (Dt | |
|
77
|
CVE-2026-114106 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerabili | |
|
75
|
CVE-2026-71153 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73890 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73902 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73915 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73927 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73934 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73935 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73936 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-95127 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of servic | |
|
75
|
CVE-2026-111418 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A server-side request forgery (SSRF) vulnerability exists in the Foxit official | |
|
75
|
CVE-2026-44705 |
7.7 | 0.0043 | NET NO AUTH LOW CX NO UI | tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the t | |
|
75
|
CVE-2026-10735 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimoni | |
|
75
|
CVE-2026-40452 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. | |
|
75
|
CVE-2026-107037 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Insecure permissions in the NotificationHelper component of NoNonsense Notes ver | |
|
75
|
CVE-2026-107047 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized at | |
|
75
|
CVE-2026-53754 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, t | |
|
75
|
CVE-2026-109197 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection | |
|
75
|
CVE-2026-8361 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processin | |
|
75
|
CVE-2026-89481 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: f | |
|
69
|
CVE-2026-12605 |
9.6 | 0.0043 | NET NO AUTH LOW CX | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet | |
|
68
|
CVE-2026-113254 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113268 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.4 | |
|
68
|
CVE-2026-113238 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.80 | |
|
67
|
CVE-2026-116843 |
8.7 | 0.0043 | NET NO AUTH LOW CX | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that al | |
|
66
|
CVE-2026-74907 |
8.2 | 0.0043 | NET NO AUTH NO UI | Grav before 2.0.15 contains a path traversal vulnerability in the static asset s | |
|
65
|
CVE-2026-46513 |
7.4 | 0.0043 | NET NO AUTH NO UI | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, | |
|
65
|
CVE-2026-49276 |
7.4 | 0.0043 | NET NO AUTH LOW CX | Kirby is an open-source content management system. Prior to 4.9.4 and 5.4.4, Kir | |
|
65
|
CVE-2026-115908 |
7.4 | 0.0043 | NET NO AUTH NO UI | zip is a zip library for Rust that supports reading and writing simple ZIP files |