Hunt List
12,807 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-49108 |
9.8 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated PHP Object Injection in Moderno < 1.43 versions. | |
|
77
|
CVE-2026-54668 |
8.7 | 0.0030 | NET LOW CX NO UI | 1 PoC | Kitodo.Production is a workflow management tool for mass digitization and is par |
|
75
|
CVE-2026-48835 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 ver | |
|
75
|
CVE-2026-39490 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions. | |
|
75
|
CVE-2026-47835 |
7.5 | 0.0030 | NET NO AUTH LOW CX NO UI | In Spring AI Vector Stores, special characters could be used to force the execut | |
|
75
|
CVE-2026-39533 |
7.5 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.4 versions. | |
|
69
|
CVE-2026-40154 |
9.6 | 0.0030 | NET NO AUTH LOW CX | PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remo | |
|
69
|
CVE-2026-27243 |
9.3 | 0.0030 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro | |
|
69
|
CVE-2026-27245 |
9.3 | 0.0030 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro | |
|
69
|
CVE-2026-27246 |
9.3 | 0.0030 | NET NO AUTH LOW CX | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cro | |
|
68
|
CVE-2026-5242 |
8.8 | 0.0030 | NET LOW CX NO UI | Improper neutralization of formula elements in a CSV file vulnerability in MIA T | |
|
67
|
CVE-2026-32272 |
8.7 | 0.0030 | NET LOW CX NO UI | Craft Commerce is an ecommerce platform for Craft CMS. In versions 5.0.0 through | |
|
67
|
CVE-2026-34024 |
8.6 | 0.0030 | NET LOW CX NO UI | The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, contains | |
|
66
|
CVE-2026-41175 |
8.1 | 0.0030 | NET LOW CX NO UI | Statamic is a Laravel and Git powered content management system (CMS). Prior to | |
|
66
|
CVE-2026-28907 |
8.1 | 0.0030 | NET NO AUTH LOW CX | The issue was addressed with improved input validation. This issue is fixed in S | |
|
65
|
CVE-2026-55391 |
7.5 | 0.0031 | NET NO AUTH NO UI | datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, a | |
|
65
|
CVE-2026-91632 |
7.7 | 0.0030 | NET LOW CX NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
64
|
CVE-2026-3861 |
7.1 | 0.0031 | NET NO AUTH LOW CX | LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in- | |
|
64
|
CVE-2026-56701 |
7.1 | 0.0031 | NET LOW CX NO UI | Grav before 2.0.0-beta.2 contains an XML external entity injection vulnerability | |
|
64
|
CVE-2026-40037 |
7.1 | 0.0031 | NET NO AUTH LOW CX | OpenClaw before 2026.4.8 contains a request body replay vulnerability in fetchWi | |
|
57
|
CVE-2026-13801 |
8.3 | 0.0030 | NET NO AUTH | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a | |
|
57
|
CVE-2026-13804 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a r | |
|
57
|
CVE-2026-13823 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
57
|
CVE-2026-13832 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Headless in Google Chrome prior to 150.0.7871.47 allowed a rem | |
|
57
|
CVE-2026-13951 |
8.3 | 0.0030 | NET NO AUTH | Insufficient policy enforcement in USB in Google Chrome prior to 150.0.7871.47 a | |
|
57
|
CVE-2026-15120 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allow | |
|
57
|
CVE-2026-15772 |
8.3 | 0.0030 | NET NO AUTH | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 allowe | |
|
57
|
CVE-2026-16804 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remot | |
|
57
|
CVE-2026-17650 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Compositing in Google Chrome prior to 151.0.7922.72 allowed a | |
|
57
|
CVE-2026-17657 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Navigation in Google Chrome prior to 151.0.7922.72 allowed a r | |
|
57
|
CVE-2026-17722 |
8.3 | 0.0030 | NET NO AUTH | Object lifecycle issue in WebView in Google Chrome on Android prior to 151.0.792 | |
|
57
|
CVE-2026-17723 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allow | |
|
57
|
CVE-2026-19137 |
8.3 | 0.0030 | NET NO AUTH | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allo | |
|
57
|
CVE-2026-19140 |
8.3 | 0.0030 | NET NO AUTH | Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote | |
|
57
|
CVE-2026-19141 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 | |
|
57
|
CVE-2026-19147 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed | |
|
57
|
CVE-2026-19148 |
8.3 | 0.0030 | NET NO AUTH | Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 all | |
|
57
|
CVE-2026-19152 |
8.3 | 0.0030 | NET NO AUTH | Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.79 | |
|
57
|
CVE-2026-19155 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a re | |
|
57
|
CVE-2026-19163 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allo | |
|
57
|
CVE-2026-19172 |
8.3 | 0.0030 | NET NO AUTH | Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remot | |
|
57
|
CVE-2026-19557 |
8.3 | 0.0030 | NET NO AUTH | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allow | |
|
55
|
CVE-2026-54322 |
7.7 | 0.0030 | NET NO UI | Daytona is a secure and elastic infrastructure runtime for AI-generated code exe | |
|
55
|
CVE-2026-13814 |
7.5 | 0.0030 | NET NO AUTH | Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote | |
|
55
|
CVE-2026-15111 |
7.5 | 0.0030 | NET NO AUTH | Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remot | |
|
55
|
CVE-2026-15117 |
7.5 | 0.0030 | NET NO AUTH | Use after free in Payments in Google Chrome prior to 150.0.7871.115 allowed a re | |
|
55
|
CVE-2026-15764 |
7.5 | 0.0030 | NET NO AUTH | Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowe | |
|
55
|
CVE-2026-15765 |
7.5 | 0.0030 | NET NO AUTH | Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remot | |
|
55
|
CVE-2026-15777 |
7.5 | 0.0030 | NET NO AUTH | Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a | |
|
55
|
CVE-2026-17887 |
7.5 | 0.0030 | NET NO AUTH | Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a rem |