Hunt List
8,546 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2023-29131 |
10.0 | 0.0042 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Af | |
|
80
|
CVE-2025-11709 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | A compromised web process was able to trigger out of bounds reads and writes in | |
|
80
|
CVE-2025-11710 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | A compromised web process using malicious IPC messages could have caused the pri | |
|
79
|
CVE-2026-10539 |
9.5 | 0.0042 | NET NO AUTH LOW CX NO UI | A Control-M/Server communication command does not sufficiently filter or sanitiz | |
|
79
|
CVE-2026-48875 |
9.3 | 0.0042 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions. | |
|
79
|
CVE-2026-76571 |
9.3 | 0.0042 | NET NO AUTH LOW CX NO UI | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter c | |
|
78
|
CVE-2026-64863 |
9.1 | 0.0042 | NET NO AUTH LOW CX NO UI | goshs is a feature-rich single-binary file server for red teamers and developers | |
|
78
|
CVE-2026-33615 |
9.1 | 0.0042 | NET NO AUTH LOW CX NO UI | An unauthenticated remote attacker can exploit an unauthenticated SQL Injection | |
|
78
|
CVE-2024-58400 |
8.8 | 0.0042 | NET NO AUTH LOW CX NO UI | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_dec | |
|
78
|
CVE-2026-65760 |
9.2 | 0.0042 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomshaper.com - cross-customer order and personal informatio | |
|
78
|
CVE-2026-40289 |
9.1 | 0.0042 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI | |
|
78
|
CVE-2026-96355 |
9.1 | 0.0042 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements Used in a Template Engine vulnerabil | |
|
78
|
CVE-2026-62857 |
8.8 | 0.0042 | NET NO AUTH LOW CX NO UI | Fedify is a TypeScript library for building federated server apps powered by Act | |
|
77
|
CVE-2019-25781 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | Python-Markdown 3.0 through 3.11.2 contains an algorithmic complexity vulnerabil | |
|
77
|
CVE-2026-41278 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
77
|
CVE-2026-46382 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | The Meeting Room Booking System (MRBS) is a PHP-based application for booking me | |
|
77
|
CVE-2026-111074 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerabl | |
|
77
|
CVE-2026-67436 |
8.3 | 0.0042 | NET NO AUTH LOW CX NO UI | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Na | |
|
76
|
CVE-2026-42013 |
8.2 | 0.0042 | NET NO AUTH LOW CX NO UI | A flaw was found in gnutls. When validating certificates, an oversized Subject A | |
|
75
|
CVE-2026-119194 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless | |
|
75
|
CVE-2026-89480 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: r | |
|
75
|
CVE-2026-110184 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | The Newsmatic theme for WordPress is vulnerable to blind SQL Injection via the ' | |
|
75
|
CVE-2026-64792 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - disclosure of restricted content via search | |
|
75
|
CVE-2026-114123 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 | |
|
75
|
CVE-2026-110682 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking chan | |
|
75
|
CVE-2026-110687 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string ke | |
|
75
|
CVE-2026-119286 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3 | |
|
69
|
CVE-2026-113078 |
9.6 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 | |
|
69
|
CVE-2026-113084 |
9.6 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 | |
|
68
|
CVE-2026-5921 |
8.9 | 0.0042 | NET NO AUTH NO UI | A server-side request forgery (SSRF) vulnerability was identified in GitHub Ente | |
|
68
|
CVE-2026-113022 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113092 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.4 | |
|
68
|
CVE-2026-113099 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Omnibox in Google Chrome on on Android prior to 156 | |
|
67
|
CVE-2026-44937 |
8.3 | 0.0042 | NET NO AUTH NO UI | Potential forgery of webhook requests when using a unauthenticated webhook in SU | |
|
67
|
CVE-2026-119028 |
8.7 | 0.0042 | NET NO AUTH LOW CX | oapi-codegen 2.0.0 before 2.8.1 contains a code injection vulnerability that all | |
|
66
|
CVE-2026-61979 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions | |
|
66
|
CVE-2026-60415 |
8.1 | 0.0042 | NET NO AUTH NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-34894 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions. | |
|
66
|
CVE-2026-39522 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Local File Inclusion in Solene <= 3.4 versions. | |
|
66
|
CVE-2026-39537 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions. | |
|
66
|
CVE-2026-39549 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions. | |
|
66
|
CVE-2026-39568 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions. | |
|
66
|
CVE-2026-40731 |
8.1 | 0.0042 | NET NO AUTH NO UI | Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. | |
|
66
|
CVE-2026-88174 |
8.1 | 0.0042 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-13787 |
8.1 | 0.0042 | NET NO AUTH NO UI | Use after free in Chromoting in Google Chrome on Windows prior to 150.0.7871.47 | |
|
64
|
CVE-2026-18655 |
7.1 | 0.0042 | NET NO AUTH LOW CX | Improper restriction of intended endpoints in the RabbitMQ broker connection too | |
|
64
|
CVE-2026-56789 |
7.1 | 0.0042 | NET NO AUTH LOW CX | RTKLIB through 2.4.3 contains a heap buffer overflow vulnerability in the readrn | |
|
64
|
CVE-2026-48798 |
7.1 | 0.0042 | NET NO AUTH LOW CX | SSH.NET is a Secure Shell (SSH) library for .NET. In 2025.1.0 and earlier, ScpCl | |
|
64
|
CVE-2026-115457 |
7.1 | 0.0042 | NET NO AUTH LOW CX | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and | |
|
55
|
CVE-2026-114145 |
7.5 | 0.0042 | NET NO AUTH | GitPython is a python library used to interact with Git repositories. Prior to 3 |