Hunt List
13,324 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-44887 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to | |
|
80
|
CVE-2026-60024 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomdonation.com - Insecure default configuration Events Book | |
|
80
|
CVE-2026-17032 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | Multiple Supsystic Pro plugins were distributed with malicious code through the | |
|
80
|
CVE-2026-45568 |
9.9 | 0.0054 | NET NO AUTH LOW CX NO UI | zrok is software for sharing web services, files, and network resources. Prior t | |
|
80
|
CVE-2026-7415 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymo | |
|
79
|
CVE-2026-63190 |
9.4 | 0.0054 | NET NO AUTH LOW CX NO UI | FearlessCMS is a flat-file `content` management system centered on simplicity an | |
|
79
|
CVE-2026-120209 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowin | |
|
79
|
CVE-2026-7166 |
9.2 | 0.0054 | NET NO AUTH LOW CX NO UI | Vulnerability involving the exposure of sensitive data provided without adequate | |
|
79
|
CVE-2026-12819 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port | |
|
79
|
CVE-2026-67341 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks o | |
|
79
|
CVE-2026-67342 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in | |
|
79
|
CVE-2026-49973 |
9.2 | 0.0054 | NET NO AUTH LOW CX NO UI | Hermes WebUI before version 0.51.358 contains an improper access control vulnera | |
|
78
|
CVE-2026-54309 |
8.8 | 0.0055 | NET NO AUTH LOW CX NO UI | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, | |
|
78
|
CVE-2026-67185 |
8.7 | 0.0055 | NET NO AUTH LOW CX NO UI | TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauth | |
|
78
|
CVE-2026-89671 |
9.1 | 0.0054 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate | |
|
78
|
CVE-2026-32688 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in elixir-plu | |
|
78
|
CVE-2026-16520 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | Improper input validation and Exposure of sensitive information through data que | |
|
78
|
CVE-2026-69079 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the | |
|
78
|
CVE-2026-47660 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | Pathling is a set of tools that make it easier to use FHIR and clinical terminol | |
|
78
|
CVE-2024-7952 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | A data exposure vulnerability exists in the affected product. There are hardcode | |
|
75
|
CVE-2026-57874 |
7.5 | 0.0055 | NET NO AUTH LOW CX NO UI | An unauthenticated buffer overflow vulnerability exists in IEEE8021x_upload.cgi | |
|
75
|
CVE-2026-16928 |
7.5 | 0.0055 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
75
|
CVE-2026-17120 |
7.5 | 0.0055 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
75
|
CVE-2026-17425 |
7.5 | 0.0055 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
75
|
CVE-2026-52794 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 2 | |
|
75
|
CVE-2026-24255 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embedding cac | |
|
75
|
CVE-2026-30778 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configurat | |
|
69
|
CVE-2026-17697 |
9.6 | 0.0054 | NET NO AUTH LOW CX | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
68
|
CVE-2026-13759 |
8.8 | 0.0055 | NET LOW CX NO UI | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStrea | |
|
68
|
CVE-2026-31432 |
8.8 | 0.0055 | NET LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix | |
|
68
|
CVE-2022-50926 |
8.7 | 0.0055 | NET LOW CX NO UI | WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnera | |
|
68
|
CVE-2026-85339 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows | |
|
68
|
CVE-2026-85936 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Double free in Windows Shell allows an unauthorized attacker to execute code ove | |
|
68
|
CVE-2026-112639 |
8.8 | 0.0054 | NET NO AUTH LOW CX | A use-after-free issue was addressed with improved memory management. This issue | |
|
68
|
CVE-2026-39911 |
8.7 | 0.0054 | NET LOW CX NO UI | Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an u | |
|
68
|
CVE-2026-41934 |
8.7 | 0.0054 | NET LOW CX NO UI | Vvveb before version 1.0.8.2 contains an authenticated remote code execution vul | |
|
68
|
CVE-2026-98870 |
8.8 | 0.0054 | NET LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: remo | |
|
68
|
CVE-2026-112637 |
8.8 | 0.0054 | NET NO AUTH LOW CX | A use-after-free issue was addressed with improved memory management. This issue | |
|
68
|
CVE-2026-45171 |
8.7 | 0.0054 | NET LOW CX NO UI | Incomplete input validation and improperly configured folder permissions within | |
|
68
|
CVE-2026-57828 |
9.0 | 0.0054 | NET LOW CX NO UI | Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads compo | |
|
68
|
CVE-2026-15804 |
8.7 | 0.0054 | NET LOW CX NO UI | The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated r | |
|
67
|
CVE-2026-47826 |
8.5 | 0.0054 | NET NO AUTH LOW CX | The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an at | |
|
66
|
CVE-2026-32623 |
7.7 | 0.0054 | NET NO AUTH LOW CX | xrdp is an open source RDP server. Versions through 0.10.5 contain a heap-based | |
|
66
|
CVE-2026-55729 |
7.7 | 0.0054 | NET NO AUTH LOW CX | Exposure of Sensitive Information (CWE-200) in LWEB802 browser `localStorage` in | |
|
66
|
CVE-2026-44252 |
7.7 | 0.0054 | NET LOW CX NO UI | Wazuh is a free and open source platform used for threat prevention, detection, | |
|
65
|
CVE-2026-6631 |
7.4 | 0.0054 | NET LOW CX NO UI | A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the | |
|
65
|
CVE-2026-7419 |
7.4 | 0.0054 | NET LOW CX NO UI | A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. Th | |
|
65
|
CVE-2026-69252 |
7.2 | 0.0054 | NET LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
64
|
CVE-2026-74038 |
7.0 | 0.0055 | NET NO AUTH LOW CX | Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows un | |
|
46
|
CVE-2024-3056 |
7.7 | 0.0054 | NET | A flaw was found in Podman. This issue may allow an attacker to create a special |