Hunt List
13,152 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-41409 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was incom | |
|
79
|
CVE-2026-56081 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Cap-go before 12.128.2 contains an authentication logic flaw that lets an attack | |
|
78
|
CVE-2026-72798 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to properly filter related-database content i | |
|
78
|
CVE-2026-46777 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
78
|
CVE-2015-20120 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL in | |
|
78
|
CVE-2026-86411 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP co | |
|
77
|
CVE-2026-59874 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar | |
|
77
|
CVE-2026-74034 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgra | |
|
77
|
CVE-2026-53430 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability i | |
|
77
|
CVE-2026-57877 |
8.6 | 0.0043 | NET NO AUTH LOW CX NO UI | An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-L | |
|
75
|
CVE-2026-111418 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A server-side request forgery (SSRF) vulnerability exists in the Foxit official | |
|
75
|
CVE-2026-44705 |
7.7 | 0.0043 | NET NO AUTH LOW CX NO UI | tmp is a temporary file and directory creator for node.js. Prior to 0.2.6, the t | |
|
75
|
CVE-2026-10735 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimoni | |
|
75
|
CVE-2026-40452 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. | |
|
75
|
CVE-2026-107037 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Insecure permissions in the NotificationHelper component of NoNonsense Notes ver | |
|
75
|
CVE-2026-107047 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized at | |
|
75
|
CVE-2026-53754 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, t | |
|
75
|
CVE-2026-109197 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection | |
|
70
|
CVE-2026-25446 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. | |
|
70
|
CVE-2026-40746 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. | |
|
70
|
CVE-2026-40747 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. | |
|
70
|
CVE-2026-40748 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. | |
|
70
|
CVE-2026-40749 |
9.9 | 0.0043 | NET LOW CX NO UI | Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. | |
|
70
|
CVE-2026-46794 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middlew | |
|
70
|
CVE-2026-60206 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-113254 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113268 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.4 | |
|
68
|
CVE-2026-101635 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101653 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101654 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101655 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101656 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101664 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
68
|
CVE-2026-101742 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su | |
|
68
|
CVE-2026-101813 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (comp | |
|
68
|
CVE-2026-113238 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.80 | |
|
68
|
CVE-2026-87351 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Suppor | |
|
68
|
CVE-2026-91478 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Ora | |
|
67
|
CVE-2026-116843 |
8.7 | 0.0043 | NET NO AUTH LOW CX | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that al | |
|
67
|
CVE-2026-63154 |
8.7 | 0.0043 | NET LOW CX NO UI | Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulne | |
|
66
|
CVE-2026-13244 |
8.1 | 0.0043 | NET LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
66
|
CVE-2026-55809 |
8.1 | 0.0043 | NET LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
66
|
CVE-2026-55810 |
8.1 | 0.0043 | NET LOW CX NO UI | Improperly Controlled Modification of Dynamically-Determined Object Attributes v | |
|
65
|
CVE-2024-56836 |
7.7 | 0.0043 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.1 | |
|
65
|
CVE-2026-46513 |
7.4 | 0.0043 | NET NO AUTH NO UI | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, | |
|
64
|
CVE-2026-57951 |
7.1 | 0.0043 | NET LOW CX NO UI | Mythic before 3.4.0.60 contains a broken hasura permission filter on the payload | |
|
64
|
CVE-2026-57212 |
7.1 | 0.0043 | NET LOW CX NO UI | RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, | |
|
64
|
CVE-2026-18640 |
7.1 | 0.0043 | NET LOW CX NO UI | The NewNotebook API does not sufficiently sanitize its parameters allowing an au | |
|
57
|
CVE-2026-118251 |
8.4 | 0.0043 | NET LOW CX | Highcharts JS is a JavaScript charting library based on SVG. Prior to 11.4.9, 12 | |
|
52
|
CVE-2026-45733 |
8.3 | 0.0043 | NET LOW CX | Trilium Notes is a cross-platform, hierarchical note taking application focused |