Hunt List
12,379 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
78
|
CVE-2026-85614 |
9.2 | 0.0026 | NET NO AUTH LOW CX NO UI | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery v | |
|
78
|
CVE-2026-48830 |
9.1 | 0.0026 | NET NO AUTH LOW CX NO UI | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenti | |
|
77
|
CVE-2026-43916 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | pam_authnft is a PAM session module binding nftables firewall rules to authentic | |
|
77
|
CVE-2026-39458 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | When a BIG-IP is configured with DNS caching (Such as a DNS profile with cachin | |
|
77
|
CVE-2026-40423 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | When a SIP profile is configured on a virtual server, undisclosed traffic can ca | |
|
77
|
CVE-2026-41218 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | When BIG-IP PEM iRules are configured on a virtual server (iRules using commands | |
|
77
|
CVE-2026-41227 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | On an HTTP/2 virtual server with Layer 7 DoS Protection configured, undisclosed | |
|
77
|
CVE-2026-41956 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | When a classification profile is configured on a UDP virtual server, undisclosed | |
|
77
|
CVE-2026-42409 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respo | |
|
77
|
CVE-2026-42920 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UD | |
|
77
|
CVE-2026-71491 |
8.7 | 0.0026 | NET NO AUTH LOW CX NO UI | sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, group | |
|
75
|
CVE-2026-45291 |
7.5 | 0.0026 | NET NO AUTH LOW CX NO UI | Cloudburst Network provides network components used within Cloudburst projects. | |
|
75
|
CVE-2026-12084 |
7.5 | 0.0026 | NET NO AUTH LOW CX NO UI | IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cr | |
|
75
|
CVE-2026-56458 |
7.5 | 0.0026 | NET NO AUTH LOW CX NO UI | HCL DevOps Deploy uses Cross-Origin Resource Sharing (CORS) which could allow an | |
|
75
|
CVE-2026-43728 |
7.5 | 0.0026 | NET NO AUTH LOW CX NO UI | This issue was addressed through improved state management. This issue is fixed | |
|
74
|
CVE-2026-57114 |
7.2 | 0.0026 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. From version 4.5.126 to before version | |
|
69
|
CVE-2026-17749 |
9.6 | 0.0026 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in Extensions in Google Chrome prior | |
|
68
|
CVE-2026-118334 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a | |
|
68
|
CVE-2026-118335 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8 | |
|
68
|
CVE-2026-118338 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a re | |
|
68
|
CVE-2026-118341 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed | |
|
68
|
CVE-2026-118343 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 | |
|
68
|
CVE-2026-118345 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remot | |
|
68
|
CVE-2026-118346 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a | |
|
68
|
CVE-2026-118347 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a r | |
|
68
|
CVE-2026-118349 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a | |
|
68
|
CVE-2026-118350 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a rem | |
|
68
|
CVE-2026-118351 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remo | |
|
68
|
CVE-2026-118352 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a rem | |
|
68
|
CVE-2026-118353 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote | |
|
68
|
CVE-2026-118354 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowe | |
|
68
|
CVE-2026-118356 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote a | |
|
68
|
CVE-2026-86467 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not | |
|
68
|
CVE-2026-27314 |
8.8 | 0.0026 | NET LOW CX NO UI | Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using Mutual | |
|
68
|
CVE-2026-14040 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in BrowserTag in Google Chrome prior to 150.0.7871.47 allowed an | |
|
68
|
CVE-2026-15110 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an | |
|
68
|
CVE-2026-17786 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Insufficient validation of untrusted input in DevTools in Google Chrome prior to | |
|
68
|
CVE-2026-17899 |
8.8 | 0.0026 | NET NO AUTH LOW CX | Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922 | |
|
67
|
CVE-2026-41505 |
8.7 | 0.0026 | NET NO AUTH NO UI | RELATE is a web-based courseware package. Prior to commit 2f68e16, RELATE is vul | |
|
67
|
CVE-2026-114658 |
8.7 | 0.0026 | NET LOW CX NO UI | Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vuln | |
|
65
|
CVE-2025-52545 |
7.7 | 0.0026 | NET LOW CX NO UI | E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an | |
|
65
|
CVE-2026-39421 |
7.4 | 0.0026 | NET LOW CX NO UI | MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below co | |
|
65
|
CVE-2026-40585 |
7.4 | 0.0026 | NET NO AUTH NO UI | blueprintUE is a tool to help Unreal Engine developers. Prior to 4.2.0, when a p | |
|
65
|
CVE-2026-49082 |
7.4 | 0.0026 | NET LOW CX NO UI | Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Cust | |
|
65
|
CVE-2026-54919 |
7.4 | 0.0026 | NET NO AUTH NO UI | cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library | |
|
65
|
CVE-2026-89058 |
7.4 | 0.0026 | NET NO AUTH LOW CX | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all o | |
|
64
|
CVE-2026-56241 |
7.2 | 0.0026 | NET LOW CX NO UI | Capgo before 12.128.2 contains a privilege escalation vulnerability where demote | |
|
59
|
CVE-2026-11587 |
7.2 | 0.0026 | NET LOW CX NO UI | SQL injection allowing an authenticated user with access to ACL management to re | |
|
56
|
CVE-2026-4828 |
8.2 | 0.0026 | NET NO UI | Improper authentication in the OAuth login functionality in Devolutions Server 2 | |
|
55
|
CVE-2026-46359 |
7.7 | 0.0026 | NET NO AUTH | phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::set |