Hunt List
12,861 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-49827 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | WebErpMesv2 is a Resource Management and Manufacturing execution system Web for | |
|
80
|
CVE-2026-63825 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: gcov: use a | |
|
80
|
CVE-2026-57624 |
10.0 | 0.0086 | NET NO AUTH LOW CX NO UI | Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 v | |
|
80
|
CVE-2026-65553 |
10.0 | 0.0086 | NET NO AUTH LOW CX NO UI | Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress | |
|
80
|
CVE-2026-27544 |
10.0 | 0.0086 | NET NO AUTH LOW CX NO UI | Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions. | |
|
80
|
CVE-2026-73343 |
10.0 | 0.0086 | NET NO AUTH LOW CX NO UI | Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. | |
|
80
|
CVE-2026-10109 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote | |
|
80
|
CVE-2026-16956 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute | |
|
80
|
CVE-2026-16882 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-48449 |
9.8 | 0.0086 | NET NO AUTH LOW CX NO UI | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi | |
|
79
|
CVE-2026-75827 |
9.3 | 0.0086 | NET NO AUTH LOW CX NO UI | Grav before 2.0.15 contains an arbitrary file write vulnerability in the Bluepri | |
|
79
|
CVE-2026-71878 |
9.2 | 0.0086 | NET NO AUTH LOW CX NO UI | Missing authentication in initial setup functionality left exposed after initial | |
|
78
|
CVE-2026-49179 |
8.8 | 0.0086 | NET NO AUTH LOW CX | 1 PoC | Improper neutralization of special elements used in a command ('command injectio |
|
78
|
CVE-2026-71879 |
9.1 | 0.0086 | NET NO AUTH LOW CX NO UI | Missing authentication in initial setup functionality left exposed until first r | |
|
75
|
CVE-2026-108131 |
7.5 | 0.0086 | NET NO AUTH LOW CX NO UI | No cwe for this issue in Active Directory Federation Services (AD FS) allows an | |
|
75
|
CVE-2026-15323 |
7.5 | 0.0086 | NET NO AUTH LOW CX NO UI | The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is | |
|
75
|
CVE-2024-26690 |
7.5 | 0.0086 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: net: stmmac | |
|
75
|
CVE-2026-46726 |
7.5 | 0.0086 | NET NO AUTH LOW CX NO UI | Improper Input Validation, Exposure of Sensitive Information to an Unauthorized | |
|
69
|
CVE-2026-70332 |
9.6 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of input during web page generation ('cross-site scripti | |
|
69
|
CVE-2026-48561 |
9.6 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of special elements used in a command ('command injectio | |
|
69
|
CVE-2026-55008 |
9.6 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of input during web page generation ('cross-site scripti | |
|
69
|
CVE-2026-65669 |
9.6 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of special elements in output used by a downstream compo | |
|
68
|
CVE-2026-71476 |
8.7 | 0.0086 | NET NO AUTH LOW CX | Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20 | |
|
68
|
CVE-2026-57104 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of input during web page generation ('cross-site scripti | |
|
68
|
CVE-2026-69320 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of special elements used in an os command ('os command i | |
|
68
|
CVE-2026-78463 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Improper control of generation of code ('code injection') in Remote Desktop Clie | |
|
68
|
CVE-2026-41109 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Improper neutralization of special elements in output used by a downstream compo | |
|
68
|
CVE-2026-72765 |
8.7 | 0.0086 | NET LOW CX NO UI | n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in ex | |
|
68
|
CVE-2026-35517 |
8.8 | 0.0086 | NET LOW CX NO UI | FTLDNS (pihole-FTL) provides an interactive API and also generates statistics fo | |
|
68
|
CVE-2026-85363 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker | |
|
68
|
CVE-2026-96235 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over | |
|
68
|
CVE-2026-88186 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac | |
|
68
|
CVE-2026-97004 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97007 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97008 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unaut | |
|
68
|
CVE-2026-97738 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Use after free in Microsoft Office Excel allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-97746 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unaut | |
|
68
|
CVE-2026-97748 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97757 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97762 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to | |
|
68
|
CVE-2026-97763 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97768 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-102858 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized at | |
|
68
|
CVE-2026-69614 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized at | |
|
68
|
CVE-2026-78518 |
8.8 | 0.0086 | NET NO AUTH LOW CX | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to | |
|
68
|
CVE-2026-54469 |
8.8 | 0.0086 | NET LOW CX NO UI | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deseria | |
|
67
|
CVE-2026-57516 |
8.6 | 0.0086 | NET NO AUTH LOW CX | Ray prior to 2.56.0 contains an unsafe deserialization vulnerability in the WebD | |
|
63
|
CVE-2026-66309 |
9.1 | 0.0086 | NET LOW CX NO UI | Improper access control in Azure SQL Database allows an authorized attacker to e | |
|
63
|
CVE-2026-69641 |
9.1 | 0.0086 | NET LOW CX NO UI | Missing authorization in Microsoft Exchange Server allows an authorized attacker | |
|
60
|
CVE-2026-92158 |
7.2 | 0.0086 | NET LOW CX NO UI | F´ (F Prime) is a framework that enables development and deployment of spaceflig |