Hunt List
8,549 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-76527 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
80
|
CVE-2026-53055 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: crypto: his | |
|
80
|
CVE-2026-14241 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidenc | |
|
80
|
CVE-2026-58422 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Improper authorization on OAuth sign-in callback silently re-enables administrat | |
|
80
|
CVE-2026-41144 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | F´ (F Prime) is a framework that enables development and deployment of spaceflig | |
|
79
|
CVE-2026-77644 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | A critical bypass access control vulnerability has been reported in PTC Windchil | |
|
79
|
CVE-2026-12818 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerab | |
|
79
|
CVE-2026-114119 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft | |
|
78
|
CVE-2026-33807 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegist | |
|
78
|
CVE-2026-118264 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy midd | |
|
78
|
CVE-2026-116818 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vuln | |
|
78
|
CVE-2026-16364 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions in the Audio/Video: Playback component. This vulne | |
|
78
|
CVE-2026-64793 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - Content access and publication bypass in Ar | |
|
78
|
CVE-2026-16503 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL insta | |
|
78
|
CVE-2026-22098 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | Various sensitive information such as passwords and charging card UIDs are writt | |
|
78
|
CVE-2026-39923 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability | |
|
78
|
CVE-2026-94140 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote r | |
|
78
|
CVE-2026-12553 |
8.9 | 0.0043 | NET NO AUTH LOW CX NO UI | HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may al | |
|
77
|
CVE-2026-7790 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te | |
|
77
|
CVE-2026-56810 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in elixir-min | |
|
77
|
CVE-2026-12577 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. | |
|
77
|
CVE-2026-9140 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | A denial-of-service security issue exists in the 1719-AENTR. The security issue | |
|
77
|
CVE-2026-12659 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | A denial-of-service security issue exists in the affected products. The security | |
|
77
|
CVE-2026-71847 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JS | |
|
77
|
CVE-2026-8798 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy | |
|
77
|
CVE-2026-13505 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2 | |
|
77
|
CVE-2021-48017 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthent | |
|
77
|
CVE-2026-71270 |
8.6 | 0.0043 | NET NO AUTH LOW CX NO UI | Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) | |
|
76
|
CVE-2024-10085 |
8.2 | 0.0043 | NET NO AUTH LOW CX NO UI | CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exis | |
|
76
|
CVE-2026-10745 |
7.9 | 0.0043 | NET NO AUTH LOW CX NO UI | Improper output neutralization for logs vulnerability in upKeeper Solutions upKe | |
|
75
|
CVE-2026-41564 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state aft | |
|
75
|
CVE-2026-28906 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | This issue was addressed through improved state management. This issue is fixed | |
|
75
|
CVE-2026-4942 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specificall | |
|
75
|
CVE-2026-105626 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in | |
|
75
|
CVE-2024-46508 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens i | |
|
75
|
CVE-2026-119191 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Forge (also called node-forge) is a native implementation of Transport Layer Sec | |
|
69
|
CVE-2026-17675 |
9.6 | 0.0043 | NET NO AUTH LOW CX | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a r | |
|
69
|
CVE-2026-17801 |
9.6 | 0.0043 | NET NO AUTH LOW CX | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 al | |
|
69
|
CVE-2026-31845 |
9.3 | 0.0043 | NET NO AUTH LOW CX | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM v | |
|
68
|
CVE-2026-14980 |
8.8 | 0.0043 | NET NO AUTH LOW CX | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerab | |
|
68
|
CVE-2026-119050 |
9.2 | 0.0043 | NET NO AUTH NO UI | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools t | |
|
68
|
CVE-2026-5274 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a re | |
|
66
|
CVE-2026-43910 |
8.2 | 0.0043 | NET NO AUTH LOW CX | Appium Java Client is the Java language binding for writing Appium tests that co | |
|
66
|
CVE-2025-62053 |
8.1 | 0.0043 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
66
|
CVE-2025-62055 |
8.1 | 0.0043 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
66
|
CVE-2026-66920 |
8.2 | 0.0043 | NET NO AUTH LOW CX | Pivotick contains an uncontrolled-recursion vulnerability when processing caller | |
|
65
|
CVE-2026-99077 |
7.4 | 0.0043 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: | |
|
65
|
CVE-2026-57989 |
7.4 | 0.0043 | NET NO AUTH LOW CX | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize | |
|
64
|
CVE-2026-58411 |
7.0 | 0.0043 | NET NO AUTH LOW CX | ChurchCRM is an open-source church management system. Prior to version 7.4.0, Cr | |
|
55
|
CVE-2026-58290 |
7.5 | 0.0043 | NET NO AUTH | Access of resource using incompatible type ('type confusion') in Microsoft Edge |