Hunt List
13,021 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-7803 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 could allow arbitrary code execution due t | |
|
80
|
CVE-2026-12692 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platf | |
|
80
|
CVE-2026-59243 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` w | |
|
80
|
CVE-2026-15706 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Baylan Measuring I | |
|
80
|
CVE-2026-76938 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. | |
|
80
|
CVE-2026-82117 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects Hi | |
|
80
|
CVE-2026-109218 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload | |
|
80
|
CVE-2026-34265 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to expl | |
|
80
|
CVE-2026-79852 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | A vulnerability in the web-based management interface of AOS could allow an unau | |
|
80
|
CVE-2026-79854 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | A vulnerability in the affected interface of AOS-10 could allow an unauthenticat | |
|
80
|
CVE-2026-16363 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability | |
|
80
|
CVE-2026-16369 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Integer overflow in the JavaScript: WebAssembly component. This vulnerability wa | |
|
80
|
CVE-2026-16389 |
9.8 | 0.0064 | NET NO AUTH LOW CX NO UI | Incorrect boundary conditions, integer overflow in the Libraries component in NS | |
|
79
|
CVE-2026-40189 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | goshs is a SimpleHTTPServer written in Go. Prior to 2.0.0-beta.4, goshs enforces | |
|
79
|
CVE-2026-69102 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT sig | |
|
79
|
CVE-2026-54211 |
9.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_ | |
|
79
|
CVE-2026-40504 |
9.3 | 0.0064 | NET NO AUTH LOW CX NO UI | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in t | |
|
78
|
CVE-2026-39803 |
8.7 | 0.0064 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in mtrudel ba | |
|
78
|
CVE-2026-56445 |
8.8 | 0.0064 | NET NO AUTH LOW CX NO UI | The qrscp application's C-STORE handler uses a specific instance from attacker-s | |
|
77
|
CVE-2026-24253 |
8.2 | 0.0064 | NET NO AUTH LOW CX NO UI | NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a | |
|
75
|
CVE-2026-49293 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spe | |
|
75
|
CVE-2026-59868 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when me | |
|
75
|
CVE-2026-59871 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, nod | |
|
75
|
CVE-2026-59922 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, | |
|
75
|
CVE-2026-59925 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, | |
|
75
|
CVE-2026-49476 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. | |
|
75
|
CVE-2026-49477 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. | |
|
75
|
CVE-2026-14257 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | brace-expansion through 5.0.7 is vulnerable to denial of service via memory exha | |
|
75
|
CVE-2026-5437 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | An out-of-bounds read vulnerability exists in `DicomStreamReader` during DICOM m | |
|
75
|
CVE-2025-65418 |
7.5 | 0.0064 | NET NO AUTH LOW CX NO UI | docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traver | |
|
69
|
CVE-2026-61445 |
9.4 | 0.0064 | NET LOW CX NO UI | PraisonAI before 4.6.78 contains arbitrary file write and command execution vuln | |
|
68
|
CVE-2026-56340 |
8.7 | 0.0064 | NET LOW CX NO UI | vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in mul | |
|
68
|
CVE-2023-3634 |
8.8 | 0.0064 | NET LOW CX NO UI | In products of the MSE6 product-family by Festo a remote authenticated, low priv | |
|
68
|
CVE-2026-111422 |
8.8 | 0.0064 | NET LOW CX NO UI | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the va | |
|
68
|
CVE-2026-46640 |
8.7 | 0.0064 | NET LOW CX NO UI | Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) | |
|
68
|
CVE-2026-66014 |
8.8 | 0.0064 | NET LOW CX NO UI | JFrog Artifactory contains an authentication handling weakness in internal reque | |
|
68
|
CVE-2026-47161 |
8.7 | 0.0064 | NET LOW CX NO UI | RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7 | |
|
67
|
CVE-2026-61443 |
8.6 | 0.0064 | NET LOW CX NO UI | PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillT | |
|
66
|
CVE-2026-114059 |
7.7 | 0.0064 | NET LOW CX NO UI | ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allo | |
|
66
|
CVE-2026-42075 |
8.1 | 0.0064 | NET LOW CX NO UI | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1. | |
|
66
|
CVE-2026-85899 |
8.1 | 0.0064 | NET LOW CX NO UI | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker | |
|
65
|
CVE-2026-4974 |
7.4 | 0.0064 | NET LOW CX NO UI | A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the fu | |
|
65
|
CVE-2026-4975 |
7.4 | 0.0064 | NET LOW CX NO UI | A vulnerability has been found in Tenda AC15 15.03.05.19. This affects the funct | |
|
65
|
CVE-2026-7080 |
7.4 | 0.0064 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts t | |
|
65
|
CVE-2026-7101 |
7.4 | 0.0064 | NET LOW CX NO UI | A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function | |
|
64
|
CVE-2026-44503 |
7.0 | 0.0064 | NET NO AUTH LOW CX | The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:micr | |
|
63
|
CVE-2026-10059 |
9.1 | 0.0064 | NET LOW CX NO UI | A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator contro | |
|
62
|
CVE-2026-13050 |
8.6 | 0.0064 | NET LOW CX NO UI | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process | |
|
62
|
CVE-2026-13053 |
8.6 | 0.0064 | NET LOW CX NO UI | An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow | |
|
60
|
CVE-2026-10698 |
7.2 | 0.0064 | NET LOW CX NO UI | Improper Neutralization of Special Elements in Data Query Logic vulnerability in |