Hunt List
13,123 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-41144 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | F´ (F Prime) is a framework that enables development and deployment of spaceflig | |
|
79
|
CVE-2026-12818 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerab | |
|
79
|
CVE-2026-114119 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft | |
|
78
|
CVE-2026-16364 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions in the Audio/Video: Playback component. This vulne | |
|
78
|
CVE-2026-64793 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - Content access and publication bypass in Ar | |
|
78
|
CVE-2026-16503 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL insta | |
|
78
|
CVE-2026-22098 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | Various sensitive information such as passwords and charging card UIDs are writt | |
|
78
|
CVE-2026-39923 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability | |
|
78
|
CVE-2026-94140 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote r | |
|
78
|
CVE-2026-12553 |
8.9 | 0.0043 | NET NO AUTH LOW CX NO UI | HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may al | |
|
77
|
CVE-2026-56810 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in elixir-min | |
|
77
|
CVE-2026-12577 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability. | |
|
77
|
CVE-2026-9140 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | A denial-of-service security issue exists in the 1719-AENTR. The security issue | |
|
77
|
CVE-2026-12659 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | A denial-of-service security issue exists in the affected products. The security | |
|
77
|
CVE-2026-71847 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JS | |
|
77
|
CVE-2026-8798 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy | |
|
77
|
CVE-2026-13505 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2 | |
|
77
|
CVE-2021-48017 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthent | |
|
77
|
CVE-2026-71270 |
8.6 | 0.0043 | NET NO AUTH LOW CX NO UI | Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) | |
|
76
|
CVE-2024-10085 |
8.2 | 0.0043 | NET NO AUTH LOW CX NO UI | CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exis | |
|
75
|
CVE-2024-46508 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens i | |
|
75
|
CVE-2026-119191 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Forge (also called node-forge) is a native implementation of Transport Layer Sec | |
|
69
|
CVE-2026-17675 |
9.6 | 0.0043 | NET NO AUTH LOW CX | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a r | |
|
69
|
CVE-2026-17801 |
9.6 | 0.0043 | NET NO AUTH LOW CX | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 al | |
|
69
|
CVE-2026-115932 |
9.6 | 0.0043 | NET LOW CX NO UI | When a post is published, Postiz treats a media path that is not a web address a | |
|
69
|
CVE-2026-31845 |
9.3 | 0.0043 | NET NO AUTH LOW CX | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM v | |
|
68
|
CVE-2026-119050 |
9.2 | 0.0043 | NET NO AUTH NO UI | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools t | |
|
68
|
CVE-2026-5274 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Integer overflow in Codecs in Google Chrome prior to 146.0.7680.178 allowed a re | |
|
68
|
CVE-2026-14536 |
8.8 | 0.0043 | NET LOW CX NO UI | Improper enforcement of a mandatory multi-factor authentication policy in Devolu | |
|
68
|
CVE-2026-39474 |
8.8 | 0.0043 | NET LOW CX NO UI | Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions. | |
|
68
|
CVE-2026-39478 |
8.8 | 0.0043 | NET LOW CX NO UI | Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewa | |
|
68
|
CVE-2026-56002 |
8.8 | 0.0043 | NET LOW CX NO UI | A heap bufferflow in pcfReadFont() due to missing glyph bounds checking in libXf | |
|
68
|
CVE-2026-76476 |
8.8 | 0.0043 | NET LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
68
|
CVE-2026-108087 |
8.8 | 0.0043 | NET LOW CX NO UI | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used | |
|
67
|
CVE-2026-3692 |
8.7 | 0.0043 | NET LOW CX NO UI | In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an | |
|
66
|
CVE-2026-110681 |
8.1 | 0.0043 | NET LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scal | |
|
66
|
CVE-2026-66920 |
8.2 | 0.0043 | NET NO AUTH LOW CX | Pivotick contains an uncontrolled-recursion vulnerability when processing caller | |
|
65
|
CVE-2026-57989 |
7.4 | 0.0043 | NET NO AUTH LOW CX | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorize | |
|
64
|
CVE-2026-103093 |
9.4 | 0.0043 | NET LOW CX NO UI | ServiceNow has remediated a sandbox escape security issue that was identified in | |
|
64
|
CVE-2026-50281 |
7.1 | 0.0043 | NET LOW CX NO UI | Craft CMS is a content management system (CMS). Versions 5.7.0 and above, prior | |
|
64
|
CVE-2026-71553 |
7.1 | 0.0043 | NET LOW CX NO UI | ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and | |
|
59
|
CVE-2026-101816 |
7.2 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
59
|
CVE-2026-101840 |
7.2 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod | |
|
59
|
CVE-2026-91316 |
7.2 | 0.0043 | NET LOW CX NO UI | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: | |
|
59
|
CVE-2026-91512 |
7.2 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
55
|
CVE-2026-57647 |
7.5 | 0.0043 | NET NO UI | Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video V | |
|
55
|
CVE-2026-57748 |
7.5 | 0.0043 | NET NO UI | Contributor Local File Inclusion in Shopify <= 1.0.0 versions. | |
|
55
|
CVE-2026-57749 |
7.5 | 0.0043 | NET NO UI | Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions. | |
|
55
|
CVE-2026-65477 |
7.5 | 0.0043 | NET NO UI | Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions. | |
|
55
|
CVE-2026-65481 |
7.5 | 0.0043 | NET NO UI | Contributor Local File Inclusion in Vino <= 1.9 versions. |