Hunt List
13,827 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
85
|
CVE-2026-117183 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | 1 PoC | A path traversal vulnerability in the FeaturedImage component of astro-notion-bl |
|
80
|
CVE-2026-107081 |
9.8 | 0.0049 | NET NO AUTH LOW CX NO UI | SQL injection via identifier injection in the tableName and tableFields POST par | |
|
80
|
CVE-2026-107058 |
9.8 | 0.0049 | NET NO AUTH LOW CX NO UI | An issue in Shelter versionCode 445 allows attackers to register their own auth_ | |
|
79
|
CVE-2026-41551 |
9.3 | 0.0049 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected ve | |
|
78
|
CVE-2026-86868 |
9.1 | 0.0049 | NET NO AUTH LOW CX NO UI | An authentication issue was addressed with improved state management. This issue | |
|
75
|
CVE-2026-47249 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1 | |
|
75
|
CVE-2026-52878 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1 | |
|
75
|
CVE-2026-52879 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. In version | |
|
75
|
CVE-2026-52880 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions f | |
|
75
|
CVE-2026-73568 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 | |
|
75
|
CVE-2026-73643 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing | |
|
75
|
CVE-2026-107039 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGu | |
|
75
|
CVE-2026-63955 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: | |
|
75
|
CVE-2026-115887 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | GraphQL Scalars is a library of custom GraphQL scalars for creating precise type | |
|
75
|
CVE-2026-13351 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Zephyr's IPv6 network stack can be prevented from receiving or processing future | |
|
75
|
CVE-2026-48044 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Envoy is an open source edge and service proxy designed for cloud-native applica | |
|
75
|
CVE-2026-101810 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
75
|
CVE-2026-110678 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffer | |
|
75
|
CVE-2026-110676 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encodi | |
|
75
|
CVE-2026-110672 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object | |
|
75
|
CVE-2026-110673 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested | |
|
74
|
CVE-2026-57209 |
7.0 | 0.0049 | NET NO AUTH LOW CX NO UI | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision serv | |
|
70
|
CVE-2026-20303 |
9.9 | 0.0049 | NET LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
68
|
CVE-2026-54149 |
8.8 | 0.0049 | NET LOW CX NO UI | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB | |
|
67
|
CVE-2026-12244 |
8.7 | 0.0049 | NET LOW CX NO UI | If NSD is configured as secondary for a zone, the primary of that zone can crash | |
|
67
|
CVE-2026-44174 |
8.7 | 0.0049 | NET LOW CX NO UI | Kirby is an open-source content management system. Prior to 4.9.1 and 5.4.1, Kir | |
|
67
|
CVE-2026-67248 |
8.7 | 0.0049 | NET LOW CX NO UI | A stack-based buffer overflow vulnerability was found in the File Explorer on th | |
|
67
|
CVE-2026-42557 |
8.6 | 0.0049 | NET NO AUTH LOW CX | jupyterlab is an extensible environment for interactive and reproducible computi | |
|
67
|
CVE-2026-118683 |
8.6 | 0.0049 | NET NO AUTH LOW CX | MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in | |
|
65
|
CVE-2026-49857 |
7.4 | 0.0049 | NET NO AUTH LOW CX | auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authe | |
|
65
|
CVE-2026-66041 |
7.7 | 0.0049 | NET NO AUTH LOW CX | FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds | |
|
64
|
CVE-2026-65916 |
7.2 | 0.0049 | NET LOW CX NO UI | CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorizat | |
|
64
|
CVE-2024-58370 |
7.1 | 0.0049 | NET LOW CX NO UI | SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when pars | |
|
64
|
CVE-2026-54623 |
7.1 | 0.0049 | NET LOW CX NO UI | django CMS is an easy-to-use and developer-friendly enterprise content managemen | |
|
64
|
CVE-2026-62315 |
7.1 | 0.0049 | NET LOW CX NO UI | Frappe is a full-stack web application framework. In version 16.31.0 and earlier | |
|
63
|
CVE-2026-61235 |
9.1 | 0.0049 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland produc | |
|
63
|
CVE-2026-62546 |
9.1 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle Applications Framework product of Oracle E-Business | |
|
63
|
CVE-2026-61034 |
9.1 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
63
|
CVE-2026-70876 |
9.1 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
62
|
CVE-2026-3415 |
8.7 | 0.0049 | NET LOW CX NO UI | The XML and schema validation functionalities within the SchemaValidator Mediato | |
|
62
|
CVE-2026-65878 |
8.3 | 0.0049 | NET LOW CX NO UI | Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Pa | |
|
59
|
CVE-2026-46954 |
7.2 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite ( | |
|
59
|
CVE-2026-46988 |
7.2 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
59
|
CVE-2026-47005 |
7.2 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
59
|
CVE-2026-47006 |
7.2 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
59
|
CVE-2026-60153 |
7.2 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
59
|
CVE-2026-60335 |
7.2 | 0.0049 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
57
|
CVE-2026-48546 |
8.5 | 0.0049 | NET LOW CX | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an at | |
|
57
|
CVE-2026-17653 |
8.3 | 0.0049 | NET NO AUTH | Use after free in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
55
|
CVE-2026-88083 |
7.5 | 0.0049 | NET NO AUTH | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to exe |