Hunt List
12,874 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-72130 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: | |
|
80
|
CVE-2026-72398 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: sctp: add I | |
|
80
|
CVE-2026-72592 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows | |
|
80
|
CVE-2026-17083 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary | |
|
80
|
CVE-2026-16845 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16862 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16864 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16872 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16885 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16894 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-16913 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17040 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17122 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17141 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17152 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
80
|
CVE-2026-17157 |
9.8 | 0.0080 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e | |
|
79
|
CVE-2026-35019 |
9.2 | 0.0081 | NET NO AUTH LOW CX NO UI | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenti | |
|
79
|
CVE-2026-58466 |
9.3 | 0.0080 | NET NO AUTH LOW CX NO UI | AutoBangumi before 3.2.8 contains a hard-coded default credentials vulnerability | |
|
78
|
CVE-2026-17556 |
8.8 | 0.0080 | NET NO AUTH LOW CX NO UI | A path traversal vulnerability was identified in GitHub Enterprise Server that a | |
|
78
|
CVE-2026-64320 |
9.1 | 0.0080 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix | |
|
77
|
CVE-2026-68749 |
8.2 | 0.0080 | NET NO AUTH LOW CX NO UI | Inefficient Regular Expression Complexity vulnerability in the CSS scrubber in r | |
|
77
|
CVE-2026-68750 |
8.2 | 0.0080 | NET NO AUTH LOW CX NO UI | Inefficient Algorithmic Complexity vulnerability in the traversal engine in rrre | |
|
75
|
CVE-2026-25703 |
7.3 | 0.0080 | NET NO AUTH LOW CX NO UI | NeuVector through 5.4.9 is can potentially leak information from manager /networ | |
|
75
|
CVE-2026-111765 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starti | |
|
75
|
CVE-2026-28952 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | An integer overflow was addressed with improved input validation. This issue is | |
|
75
|
CVE-2026-26164 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in a command ('command injectio | |
|
75
|
CVE-2026-71559 |
7.5 | 0.0080 | NET NO AUTH LOW CX NO UI | Deserialization of Untrusted Data vulnerability in the Go implementation of Apac | |
|
68
|
CVE-2023-27463 |
8.8 | 0.0080 | NET LOW CX NO UI | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). | |
|
68
|
CVE-2026-69118 |
8.7 | 0.0080 | NET LOW CX NO UI | Cachet through 2.4.1 contains a server-side template injection vulnerability in | |
|
68
|
CVE-2026-97753 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized atta | |
|
68
|
CVE-2026-97755 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to | |
|
68
|
CVE-2026-97759 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Use after free in Microsoft Office Excel allows an unauthorized attacker to exec | |
|
68
|
CVE-2026-72778 |
8.7 | 0.0080 | NET LOW CX NO UI | Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 | |
|
68
|
CVE-2026-13716 |
9.1 | 0.0080 | NET LOW CX NO UI | Path traversal in server import and admin file upload in Crafty Controller. Allo | |
|
68
|
CVE-2026-70007 |
8.8 | 0.0080 | NET NO AUTH LOW CX | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute | |
|
68
|
CVE-2026-65423 |
8.7 | 0.0080 | NET LOW CX NO UI | An integer overflow in the UA_Variant arrayDimensions product computation in op | |
|
67
|
CVE-2026-40501 |
8.6 | 0.0080 | NET NO AUTH LOW CX | Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a | |
|
66
|
CVE-2026-83522 |
8.1 | 0.0080 | NET NO AUTH NO UI | Reliance on untrusted inputs in a security decision in Windows IKE Extension all | |
|
66
|
CVE-2026-83914 |
8.1 | 0.0080 | NET NO AUTH NO UI | Use after free in Microsoft XML allows an unauthorized attacker to execute code | |
|
66
|
CVE-2026-68746 |
7.7 | 0.0080 | NET LOW CX NO UI | Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook all | |
|
65
|
CVE-2026-12806 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability has been found in Edimax BR-6478AC V2 1.23. The impacted element | |
|
65
|
CVE-2026-13562 |
7.4 | 0.0080 | NET LOW CX NO UI | A flaw has been found in Edimax EW-7478APC 1.04. This affects the function formi | |
|
65
|
CVE-2026-13563 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability has been found in Edimax EW-7478APC 1.04. This impacts the funct | |
|
65
|
CVE-2026-13564 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability was found in Edimax EW-7478APC 1.04. Affected is the function fo | |
|
65
|
CVE-2026-13580 |
7.4 | 0.0080 | NET LOW CX NO UI | A security vulnerability has been detected in Edimax EW-7478APC 1.04. This affec | |
|
65
|
CVE-2026-13582 |
7.4 | 0.0080 | NET LOW CX NO UI | A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function | |
|
65
|
CVE-2026-13583 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability has been found in Edimax EW-7478APC 1.04. Impacted is the functi | |
|
65
|
CVE-2026-18895 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacte | |
|
65
|
CVE-2026-18897 |
7.4 | 0.0080 | NET LOW CX NO UI | A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. T | |
|
65
|
CVE-2026-18898 |
7.4 | 0.0080 | NET LOW CX NO UI | A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. Thi |