Hunt List
12,861 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-103409 |
9.8 | 0.0035 | NET NO AUTH LOW CX NO UI | A Missing authentication for critical function vulnerability in Juniper Networks | |
|
80
|
CVE-2026-6853 |
9.8 | 0.0035 | NET NO AUTH LOW CX NO UI | Improper restriction of excessive authentication attempts vulnerability in Başbe | |
|
79
|
CVE-2026-49079 |
9.3 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions. | |
|
78
|
CVE-2026-41930 |
9.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in | |
|
78
|
CVE-2026-34287 |
9.1 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
77
|
CVE-2026-118686 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulner | |
|
77
|
CVE-2026-32965 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | Initialization of a resource with an insecure default vulnerability exists in SD | |
|
75
|
CVE-2026-33597 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | PRSD detection denial of service | |
|
75
|
CVE-2026-28990 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in iO | |
|
75
|
CVE-2026-43654 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | The issue was addressed with improved memory handling. This issue is fixed in iO | |
|
75
|
CVE-2026-57873 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | An unauthenticated NULL pointer dereference vulnerability exists in IEEE8021x_up | |
|
75
|
CVE-2026-16837 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
75
|
CVE-2026-40396 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (da | |
|
75
|
CVE-2026-57111 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org | |
|
75
|
CVE-2026-33692 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env | |
|
75
|
CVE-2026-40890 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdow | |
|
75
|
CVE-2026-48872 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions. | |
|
75
|
CVE-2026-54828 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Motors <= 1.4.109 versions. | |
|
75
|
CVE-2026-54830 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2. | |
|
75
|
CVE-2026-54844 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 ve | |
|
75
|
CVE-2026-54832 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. | |
|
75
|
CVE-2026-54835 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 vers | |
|
75
|
CVE-2026-56025 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 version | |
|
75
|
CVE-2026-56061 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 | |
|
75
|
CVE-2026-9563 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the J | |
|
75
|
CVE-2026-39448 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 ve | |
|
75
|
CVE-2026-57378 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms | |
|
75
|
CVE-2026-57705 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allow | |
|
75
|
CVE-2026-64797 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login exten | |
|
75
|
CVE-2026-59547 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommer | |
|
75
|
CVE-2026-61954 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions. | |
|
68
|
CVE-2026-8444 |
8.8 | 0.0035 | NET LOW CX NO UI | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via | |
|
68
|
CVE-2026-104368 |
8.8 | 0.0035 | NET LOW CX NO UI | The Export and Import Users and Customers plugin for WordPress is vulnerable to | |
|
68
|
CVE-2026-53609 |
9.1 | 0.0035 | NET LOW CX NO UI | ApostropheCMS is an open-source Node.js content management system. In versions u | |
|
67
|
CVE-2026-22335 |
8.5 | 0.0035 | NET LOW CX NO UI | Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 vers | |
|
67
|
CVE-2026-12043 |
8.7 | 0.0035 | NET NO AUTH LOW CX | Improper handling of HPACK dynamic table size updates in the AWS Common Runtime | |
|
67
|
CVE-2026-56243 |
8.6 | 0.0035 | NET LOW CX NO UI | Capgo before 12.128.2 contains a security control bypass vulnerability where the | |
|
66
|
CVE-2026-41496 |
8.1 | 0.0035 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to praisonai version 4.6.9 and pr | |
|
66
|
CVE-2026-13791 |
8.1 | 0.0035 | NET NO AUTH NO UI | Insufficient validation of untrusted input in Downloads in Google Chrome prior t | |
|
66
|
CVE-2026-22165 |
8.1 | 0.0035 | NET LOW CX NO UI | A web page that contains unusual WebGPU content loaded into the GPU GLES render | |
|
66
|
CVE-2026-57645 |
8.1 | 0.0035 | NET NO AUTH LOW CX | newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions. | |
|
64
|
CVE-2026-116149 |
7.2 | 0.0035 | NET LOW CX NO UI | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buff | |
|
64
|
CVE-2026-56147 |
7.1 | 0.0035 | NET LOW CX NO UI | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to | |
|
64
|
CVE-2026-56783 |
7.1 | 0.0035 | NET LOW CX NO UI | Parseable before 2.9.2 contains an information disclosure vulnerability in the n | |
|
64
|
CVE-2026-110220 |
7.1 | 0.0035 | NET LOW CX NO UI | Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vu | |
|
62
|
CVE-2026-107671 |
8.5 | 0.0035 | NET LOW CX NO UI | A vulnerability allowing an attacker with valid Administrator credentials to byp | |
|
59
|
CVE-2026-34292 |
7.2 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
57
|
CVE-2026-54662 |
8.3 | 0.0035 | NET NO AUTH | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI spe | |
|
57
|
CVE-2026-19154 |
8.3 | 0.0035 | NET NO AUTH | Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allow | |
|
55
|
CVE-2026-101719 |
7.5 | 0.0035 | NET NO AUTH | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: |