Hunt List
12,844 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-57926 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable t | |
|
80
|
CVE-2026-17617 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side | |
|
80
|
CVE-2026-86397 |
9.8 | 0.0034 | NET NO AUTH LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
78
|
CVE-2026-32967 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | Incorrect Authorization vulnerability of `/v2` experimental interface in Apache | |
|
78
|
CVE-2026-93909 |
9.1 | 0.0034 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnera | |
|
77
|
CVE-2026-46366 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the ge | |
|
77
|
CVE-2026-55826 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | The GTM Server Side plugin by stape.io implements server-side tracking on WordPr | |
|
77
|
CVE-2026-119655 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability i | |
|
77
|
CVE-2026-119656 |
8.7 | 0.0034 | NET NO AUTH LOW CX NO UI | CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vu | |
|
76
|
CVE-2026-34531 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask ro | |
|
76
|
CVE-2026-59096 |
8.2 | 0.0034 | NET NO AUTH LOW CX NO UI | Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.w | |
|
75
|
CVE-2026-34290 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
75
|
CVE-2026-44601 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a | |
|
75
|
CVE-2026-8359 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | When processing a request with a URL path starting with /status or /sysinfo, WOS | |
|
75
|
CVE-2026-8360 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DL | |
|
75
|
CVE-2026-67973 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers to cause a | |
|
75
|
CVE-2026-59893 |
7.5 | 0.0034 | NET NO AUTH LOW CX NO UI | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL_R | |
|
70
|
CVE-2026-42756 |
9.9 | 0.0034 | NET LOW CX NO UI | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v | |
|
69
|
CVE-2026-46906 |
9.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
69
|
CVE-2026-91218 |
9.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
69
|
CVE-2026-44482 |
9.6 | 0.0034 | NET NO AUTH LOW CX | soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Las | |
|
69
|
CVE-2026-17832 |
9.6 | 0.0034 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
68
|
CVE-2026-113228 |
8.8 | 0.0034 | NET NO AUTH LOW CX | Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remo | |
|
67
|
CVE-2026-56232 |
8.7 | 0.0034 | NET LOW CX NO UI | Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps const | |
|
67
|
CVE-2026-118245 |
8.6 | 0.0034 | NET LOW CX NO UI | Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4. | |
|
66
|
CVE-2026-46891 |
8.1 | 0.0034 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle | |
|
66
|
CVE-2026-18092 |
8.1 | 0.0034 | NET NO AUTH LOW CX | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XM | |
|
66
|
CVE-2026-112850 |
8.1 | 0.0034 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
66
|
CVE-2026-69680 |
8.1 | 0.0034 | NET NO AUTH NO UI | Origin validation error in Windows DNS allows an unauthorized attacker to perfor | |
|
65
|
CVE-2026-114488 |
7.4 | 0.0034 | NET NO AUTH NO UI | A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP | |
|
64
|
CVE-2026-35602 |
7.1 | 0.0034 | NET LOW CX NO UI | Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, | |
|
64
|
CVE-2026-40039 |
7.1 | 0.0034 | NET NO AUTH LOW CX | Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to | |
|
64
|
CVE-2026-49295 |
7.1 | 0.0034 | NET NO AUTH LOW CX | libde265 is an open source implementation of the h.265 video codec. Prior to ver | |
|
64
|
CVE-2026-57332 |
7.1 | 0.0034 | NET LOW CX NO UI | Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versi | |
|
64
|
CVE-2026-57367 |
7.1 | 0.0034 | NET LOW CX NO UI | Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. | |
|
64
|
CVE-2026-65554 |
7.1 | 0.0034 | NET LOW CX NO UI | Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 version | |
|
64
|
CVE-2026-63224 |
7.2 | 0.0034 | NET LOW CX NO UI | OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the ` | |
|
64
|
CVE-2026-44012 |
7.1 | 0.0034 | NET LOW CX NO UI | Craft CMS is a content management system (CMS). From 5.0.0-RC1 to before 5.9.18, | |
|
60
|
CVE-2026-60578 |
7.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
60
|
CVE-2026-61325 |
7.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite | |
|
60
|
CVE-2026-62515 |
7.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle Advanced Planning Command Center product of Oracle E | |
|
60
|
CVE-2026-60748 |
7.6 | 0.0034 | NET LOW CX NO UI | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c | |
|
59
|
CVE-2026-66394 |
9.3 | 0.0034 | NET LOW CX | SiYuan before v3.7.3 contains stored and reflected cross-site scripting vulnerab | |
|
57
|
CVE-2026-118246 |
8.4 | 0.0034 | NET LOW CX | Highcharts JS is a JavaScript charting library based on SVG. From 10.0.0 until 1 | |
|
55
|
CVE-2026-13283 |
7.5 | 0.0034 | NET NO AUTH | Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 a | |
|
55
|
CVE-2026-13831 |
7.5 | 0.0034 | NET NO AUTH | Out of bounds read and write in GPU in Google Chrome prior to 150.0.7871.47 allo | |
|
55
|
CVE-2026-13855 |
7.5 | 0.0034 | NET NO AUTH | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed | |
|
54
|
CVE-2026-116796 |
7.2 | 0.0034 | NET LOW CX | Highcharts JS is a JavaScript charting library based on SVG. From 10.3.2 until 1 | |
|
54
|
CVE-2026-118244 |
7.2 | 0.0034 | NET LOW CX | Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 1 | |
|
52
|
CVE-2026-116964 |
8.4 | 0.0034 | NET LOW CX | A flaw was found in konflux-ci. An attacker with repository write access can ach |