Hunt List
8,543 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-11541 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebS | |
|
80
|
CVE-2026-76466 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | A vulnerability in the database service feature of Cisco Expressway Series could | |
|
80
|
CVE-2026-29198 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7 | |
|
80
|
CVE-2026-57116 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4. | |
|
80
|
CVE-2026-65184 |
9.8 | 0.0042 | NET NO AUTH LOW CX NO UI | The root-privileged `wsserver` terminal-bridge daemon builds a shell command fro | |
|
78
|
CVE-2024-4457 |
9.1 | 0.0042 | NET NO AUTH LOW CX NO UI | The Management Console fails to properly validate input related to the configura | |
|
78
|
CVE-2026-35675 |
8.8 | 0.0042 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the pas | |
|
77
|
CVE-2026-54417 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | An integer overflow in the mtar_next function in src/microtar.c in rxi microtar | |
|
77
|
CVE-2026-62160 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | Daptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `Languag | |
|
76
|
CVE-2026-48145 |
8.2 | 0.0042 | NET NO AUTH LOW CX NO UI | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Th | |
|
75
|
CVE-2026-82425 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows | |
|
75
|
CVE-2026-116638 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attac | |
|
75
|
CVE-2026-16378 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerabili | |
|
75
|
CVE-2026-68968 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Apache Airflow's Backfill API authorized a request against a Dag id supplied by | |
|
75
|
CVE-2026-73261 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Mongoose is an embedded web server and network library. Prior to 7.23, the built | |
|
68
|
CVE-2026-113040 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113041 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113042 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113044 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote at | |
|
68
|
CVE-2026-113049 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
68
|
CVE-2026-113052 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113079 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113100 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113104 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113105 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113106 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
68
|
CVE-2026-113108 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113109 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113110 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113111 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113113 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113117 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.807 | |
|
68
|
CVE-2026-113119 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113134 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113149 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113150 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113153 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113154 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113155 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote | |
|
68
|
CVE-2026-113164 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113166 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in History in Google Chrome on on Android prior to 156.0.8078. | |
|
68
|
CVE-2026-113173 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in UI in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-113207 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-113226 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113229 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remot | |
|
68
|
CVE-2026-113232 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a re | |
|
68
|
CVE-2026-113233 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113234 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-113292 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Improper input validation in Omnibox in Google Chrome on on Android prior to 156 | |
|
68
|
CVE-2026-113180 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Memory corruption in ContentCapture in Google Chrome on on Android prior to 156. |