Hunt List
13,244 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-83944 |
10.0 | 0.0044 | NET NO AUTH LOW CX NO UI | Improper access control in Azure Logic Apps allows an unauthorized attacker to e | |
|
80
|
CVE-2026-54133 |
9.8 | 0.0044 | NET NO AUTH LOW CX NO UI | jmespath.php allows users to use JMESPath, software for declaratively specifying | |
|
78
|
CVE-2026-120446 |
8.8 | 0.0044 | NET NO AUTH LOW CX NO UI | madong-admin-saas through 5.1.4 contains a missing authentication vulnerability | |
|
78
|
CVE-2026-7381 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-c | |
|
78
|
CVE-2026-16390 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Enterprise Policies component. This vulnerability was f | |
|
77
|
CVE-2026-40769 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – | |
|
76
|
CVE-2026-60544 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
76
|
CVE-2026-60796 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
76
|
CVE-2026-61302 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
76
|
CVE-2026-70743 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyper | |
|
76
|
CVE-2026-70870 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
76
|
CVE-2026-70909 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
76
|
CVE-2026-70952 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
76
|
CVE-2026-71024 |
8.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2025-66769 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attack | |
|
75
|
CVE-2026-49486 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_T | |
|
75
|
CVE-2026-113872 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | multer is a middleware for Node.js that handles multipart/form-data file uploads | |
|
74
|
CVE-2026-44161 |
7.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Fluentd collects events from various data sources and writes them to files, RDBM | |
|
74
|
CVE-2026-109997 |
7.2 | 0.0044 | NET NO AUTH LOW CX NO UI | The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & A | |
|
70
|
CVE-2026-48086 |
9.9 | 0.0044 | NET LOW CX NO UI | OpenReception's appointment booking software provides an end-to-end encrypted ap | |
|
70
|
CVE-2026-46855 |
9.9 | 0.0044 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
69
|
CVE-2026-58053 |
9.4 | 0.0044 | NET LOW CX NO UI | Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow | |
|
68
|
CVE-2026-113293 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-113312 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 | |
|
68
|
CVE-2026-113317 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.807 | |
|
68
|
CVE-2026-113323 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078. | |
|
68
|
CVE-2026-113331 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113334 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0 | |
|
68
|
CVE-2026-48704 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Warp is an agentic development environment. From 0.2023.10.24.08.03.stable_00 un | |
|
68
|
CVE-2026-48720 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Warp is an agentic development environment. From 0.2025.03.05.08.02.stable_00 un | |
|
68
|
CVE-2026-44938 |
8.8 | 0.0044 | NET LOW CX NO UI | A vulnerability has been identified in Fleet's agent-side deployer, which did no | |
|
68
|
CVE-2026-5523 |
8.8 | 0.0044 | NET LOW CX NO UI | The Divi Form Builder plugin for WordPress is vulnerable to Missing Authorizatio | |
|
68
|
CVE-2026-48169 |
8.8 | 0.0044 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonA | |
|
68
|
CVE-2026-58243 |
8.8 | 0.0044 | NET LOW CX NO UI | SAP ABAP Development Tools does not perform necessary authorization checks for c | |
|
67
|
CVE-2026-62233 |
8.7 | 0.0044 | NET LOW CX NO UI | grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKe | |
|
67
|
CVE-2026-63727 |
8.7 | 0.0044 | NET LOW CX NO UI | Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper | |
|
67
|
CVE-2026-67356 |
8.7 | 0.0044 | NET LOW CX NO UI | ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigg | |
|
67
|
CVE-2026-17600 |
8.7 | 0.0044 | NET LOW CX NO UI | Sonatype Nexus Repository 3 did not immediately terminate a user's active login | |
|
67
|
CVE-2026-58378 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on product | |
|
66
|
CVE-2025-48090 |
8.1 | 0.0044 | NET NO AUTH NO UI | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPre | |
|
66
|
CVE-2026-58283 |
8.1 | 0.0044 | NET NO AUTH NO UI | Access of resource using incompatible type ('type confusion') in Microsoft Edge | |
|
65
|
CVE-2026-42129 |
7.7 | 0.0044 | NET LOW CX NO UI | A user with Viewer permissions can use a path traversal in the Loki data source | |
|
65
|
CVE-2026-14468 |
7.7 | 0.0044 | NET LOW CX NO UI | HashiCorp Terraform Enterprise contained an issue in its version control system | |
|
65
|
CVE-2026-65582 |
7.7 | 0.0044 | NET LOW CX NO UI | Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions. | |
|
65
|
CVE-2026-33655 |
7.7 | 0.0044 | NET LOW CX NO UI | New API is a large language mode (LLM) gateway and artificial intelligence (AI) | |
|
64
|
CVE-2026-55092 |
7.0 | 0.0044 | NET NO AUTH LOW CX | Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifa | |
|
62
|
CVE-2026-18860 |
8.7 | 0.0044 | NET LOW CX NO UI | Velociraptor allows multi-tenant deployments named "Orgs". By default Velocirap | |
|
62
|
CVE-2026-74043 |
8.5 | 0.0044 | NET LOW CX NO UI | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload | |
|
59
|
CVE-2025-71392 |
9.4 | 0.0044 | NET LOW CX | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to prop | |
|
59
|
CVE-2026-114633 |
7.0 | 0.0044 | NET LOW CX NO UI | WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that |