Hunt List
12,840 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
85
|
CVE-2026-97206 |
7.5 | 0.0033 | NET NO AUTH LOW CX NO UI | 1 PoC | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-ov |
|
80
|
CVE-2026-42731 |
9.8 | 0.0033 | NET NO AUTH LOW CX NO UI | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verifi | |
|
80
|
CVE-2026-53914 |
9.8 | 0.0033 | NET NO AUTH LOW CX NO UI | In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deseria | |
|
80
|
CVE-2026-40494 |
9.8 | 0.0033 | NET NO AUTH LOW CX NO UI | SAIL is a cross-platform library for loading and saving images with support for | |
|
79
|
CVE-2026-48616 |
9.3 | 0.0033 | NET NO AUTH LOW CX NO UI | Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 | |
|
78
|
CVE-2026-9270 |
9.1 | 0.0033 | NET NO AUTH LOW CX NO UI | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. Data | |
|
78
|
CVE-2026-71290 |
9.1 | 0.0033 | NET NO AUTH LOW CX NO UI | Improper TLS hostname verification vulnerability in Apache HttpComponents Client | |
|
78
|
CVE-2026-63159 |
9.1 | 0.0033 | NET NO AUTH LOW CX NO UI | Omnispace Agora Project before 26.10.0 contains a predictable password-reset tok | |
|
77
|
CVE-2026-116591 |
8.7 | 0.0033 | NET NO AUTH LOW CX NO UI | compress provides various compression algorithms. Prior to 1.20.2, the zstd Deco | |
|
77
|
CVE-2026-54284 |
8.7 | 0.0033 | NET NO AUTH LOW CX NO UI | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, Token | |
|
77
|
CVE-2026-44886 |
8.7 | 0.0033 | NET NO AUTH LOW CX NO UI | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 202 | |
|
76
|
CVE-2026-62386 |
8.2 | 0.0033 | NET NO AUTH LOW CX NO UI | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT acc | |
|
76
|
CVE-2026-59731 |
8.2 | 0.0033 | NET NO AUTH LOW CX NO UI | Astro is a web framework for content-driven websites. Version 6.4.7 performs aut | |
|
75
|
CVE-2026-54299 |
7.5 | 0.0033 | NET NO AUTH LOW CX NO UI | Astro is a web framework. Prior to 6.4.6, Astro SSR apps with prerendered error | |
|
75
|
CVE-2026-41324 |
7.5 | 0.0033 | NET NO AUTH LOW CX NO UI | basic-ftp is an FTP client for Node.js. Versions prior to 5.3.0 are vulnerable t | |
|
74
|
CVE-2026-73367 |
7.2 | 0.0033 | NET NO AUTH LOW CX NO UI | Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions. | |
|
69
|
CVE-2026-14101 |
9.6 | 0.0033 | NET NO AUTH LOW CX | Insufficient policy enforcement in Sandbox in Google Chrome on Mac prior to 150. | |
|
69
|
CVE-2026-75626 |
9.3 | 0.0033 | NET NO AUTH LOW CX | SpiderFoot fails to HTML-escape correlation titles built from external scan data | |
|
68
|
CVE-2026-13897 |
8.8 | 0.0033 | NET NO AUTH LOW CX | Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.78 | |
|
68
|
CVE-2026-17868 |
8.8 | 0.0033 | NET NO AUTH LOW CX | Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 a | |
|
67
|
CVE-2026-40766 |
8.5 | 0.0033 | NET LOW CX NO UI | Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions. | |
|
67
|
CVE-2026-48874 |
8.5 | 0.0033 | NET LOW CX NO UI | Subscriber SQL Injection in GamiPress <= 7.8.7 versions. | |
|
67
|
CVE-2026-48882 |
8.5 | 0.0033 | NET LOW CX NO UI | Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions. | |
|
67
|
CVE-2026-48967 |
8.5 | 0.0033 | NET LOW CX NO UI | Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions. | |
|
67
|
CVE-2026-54185 |
8.5 | 0.0033 | NET LOW CX NO UI | Subscriber SQL Injection in Cornerstone < 7.8.8 versions. | |
|
65
|
CVE-2026-101775 |
7.4 | 0.0033 | NET NO AUTH NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
64
|
CVE-2026-39308 |
7.1 | 0.0033 | NET LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe re | |
|
63
|
CVE-2026-41201 |
9.1 | 0.0033 | NET LOW CX NO UI | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, mo | |
|
62
|
CVE-2026-13722 |
8.6 | 0.0033 | NET LOW CX NO UI | WatchGuard Fireware OS contains a firmware validation bypass when processing a b | |
|
59
|
CVE-2026-111982 |
7.2 | 0.0033 | NET LOW CX NO UI | The User Profile Builder WordPress plugin before 4.0.5 does not verify that a u | |
|
59
|
CVE-2026-86393 |
7.2 | 0.0033 | NET LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
59
|
CVE-2026-69704 |
7.0 | 0.0033 | NET LOW CX NO UI | Atals-Livre contains a SQL injection vulnerability that allows attackers to mani | |
|
58
|
CVE-2026-72807 |
8.8 | 0.0033 | NET NO AUTH | SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability | |
|
57
|
CVE-2026-35302 |
8.3 | 0.0033 | NET NO AUTH | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
57
|
CVE-2026-46808 |
8.7 | 0.0033 | NET LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
57
|
CVE-2026-45049 |
8.3 | 0.0033 | NET NO AUTH | Open Access Management (OpenAM) is an access management solution. Prior to 16.1. | |
|
57
|
CVE-2026-13323 |
8.7 | 0.0033 | NET LOW CX | In Open VSX Registry before 1.0.2, the /vscode/unpkg/ endpoint serves user-suppl | |
|
57
|
CVE-2026-13803 |
8.3 | 0.0033 | NET NO AUTH | Type Confusion in Chrome Tabs in Google Chrome prior to 150.0.7871.47 allowed a | |
|
57
|
CVE-2026-14151 |
8.3 | 0.0033 | NET NO AUTH | Inappropriate implementation in AI in Google Chrome prior to 150.0.7871.47 allow | |
|
56
|
CVE-2026-4924 |
8.2 | 0.0033 | NET NO UI | Improper authentication in the two-factor authentication (2FA) feature in Devo | |
|
56
|
CVE-2023-27753 |
8.0 | 0.0033 | NET LOW CX | An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to | |
|
55
|
CVE-2026-70829 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Bu | |
|
55
|
CVE-2026-70865 |
7.5 | 0.0033 | NET NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
55
|
CVE-2026-70875 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
55
|
CVE-2026-70930 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite | |
|
55
|
CVE-2026-70937 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
55
|
CVE-2026-70946 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
55
|
CVE-2026-70973 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
55
|
CVE-2026-71069 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch | |
|
55
|
CVE-2026-71160 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp |