Hunt List
18,352 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-28573 |
10.0 | 0.0014 | NET NO AUTH LOW CX NO UI | In AndroidManifest.xml, there is a possible persistent denial of service due to | |
|
79
|
CVE-2026-13385 |
9.5 | 0.0014 | NET NO AUTH LOW CX NO UI | An Improper Validation of Integrity Check Value and Improper Certificate Validat | |
|
77
|
CVE-2026-63571 |
8.7 | 0.0014 | NET NO AUTH LOW CX NO UI | Improper verification of cryptographic signature in the attribute certificate pa | |
|
75
|
CVE-2026-28553 |
7.5 | 0.0014 | NET NO AUTH LOW CX NO UI | Vulnerability of improper permission control in the theme setting module. Impact | |
|
75
|
CVE-2026-120987 |
7.5 | 0.0014 | NET NO AUTH LOW CX NO UI | Whale Browser before 5.39.412.57 allows an attacker to bypass the iframe sandbox | |
|
75
|
CVE-2026-34856 |
7.5 | 0.0014 | NET NO AUTH LOW CX NO UI | UAF vulnerability in the communication module. Impact: Successful exploitation o | |
|
69
|
CVE-2025-27851 |
9.3 | 0.0014 | NET NO AUTH LOW CX | The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cro | |
|
68
|
CVE-2026-125836 |
8.8 | 0.0014 | NET NO AUTH LOW CX | Cross-Site Request Forgery (CSRF) vulnerability in Nicu Micle Simple JWT Login s | |
|
67
|
CVE-2026-11719 |
8.6 | 0.0014 | NET LOW CX NO UI | An authenticated authorization bypass vulnerability exists in MCP Toolbox for Da | |
|
67
|
CVE-2026-28201 |
8.7 | 0.0014 | NET NO AUTH LOW CX | An improper input validation, together with an overly permissive default CORS co | |
|
67
|
CVE-2026-117536 |
8.6 | 0.0014 | NET NO AUTH LOW CX | REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the | |
|
66
|
CVE-2026-115758 |
8.2 | 0.0014 | NET NO AUTH NO UI | SumatraPDF is a multi-format reader for Windows. In version 3.6.1 and earlier, H | |
|
66
|
CVE-2026-40070 |
8.1 | 0.0014 | NET LOW CX NO UI | BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, | |
|
66
|
CVE-2026-44548 |
8.1 | 0.0014 | NET NO AUTH LOW CX | ChurchCRM is an open-source church management system. Prior to 7.3.2, top-level | |
|
66
|
CVE-2026-76792 |
8.1 | 0.0014 | NET NO AUTH NO UI | The User Verification by PickPlugins WordPress plugin before 2.0.49 does not rat | |
|
64
|
CVE-2026-112863 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-115606 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-115609 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-54851 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-119366 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-119477 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-54861 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-57639 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-57666 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-62007 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-39744 |
7.1 | 0.0015 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-52702 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. | |
|
64
|
CVE-2026-30807 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Cross-Site Request Forgery vulnerability allows an attacker to perform unauthori | |
|
64
|
CVE-2026-41554 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-42762 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-42653 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti | |
|
64
|
CVE-2026-49396 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitorin | |
|
64
|
CVE-2026-39437 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manag | |
|
64
|
CVE-2026-54188 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
|
64
|
CVE-2026-54189 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
|
64
|
CVE-2026-119407 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Element Web and Element Desktop before 1.12.32 accept guest credentials from URL | |
|
64
|
CVE-2026-116204 |
7.2 | 0.0014 | NET NO AUTH LOW CX | YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the | |
|
64
|
CVE-2026-44501 |
7.1 | 0.0014 | NET LOW CX NO UI | DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub front | |
|
64
|
CVE-2026-45037 |
7.1 | 0.0014 | NET NO AUTH LOW CX | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1 | |
|
57
|
CVE-2026-12454 |
8.3 | 0.0015 | NET NO AUTH | Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.155 allowed a | |
|
57
|
CVE-2026-12468 |
8.3 | 0.0014 | NET NO AUTH | Race in Updater in Google Chrome on Mac prior to 149.0.7827.155 allowed a remote | |
|
57
|
CVE-2026-8833 |
8.5 | 0.0014 | NET LOW CX | Improper neutralization of HTML-encoded characters in the URL validation functio | |
|
57
|
CVE-2026-7186 |
8.5 | 0.0014 | NET LOW CX | Stored cross-site scripting in the URL dashboard widget in Checkmk <2.5.0p5, <2. | |
|
56
|
CVE-2026-95741 |
8.0 | 0.0014 | NET LOW CX | A missing integrity verification vulnerability exists in the API of HPE Networki | |
|
55
|
CVE-2026-101504 |
7.6 | 0.0015 | NET LOW CX | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI) | |
|
55
|
CVE-2026-115930 |
7.6 | 0.0014 | NET NO AUTH | The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carr | |
|
55
|
CVE-2026-116641 |
7.6 | 0.0014 | NET NO AUTH | The DB Tools rely on the TLS implementation in Golang’s standard library, which | |
|
55
|
CVE-2026-116189 |
7.7 | 0.0014 | NET NO AUTH | rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in sta | |
|
55
|
CVE-2026-42428 |
7.5 | 0.0014 | NET LOW CX | OpenClaw versions before 2026.4.8 fail to enforce integrity verification on down | |
|
44
|
CVE-2026-101447 |
7.1 | 0.0014 | NET | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon |