Hunt List
13,340 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-41497 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.9, the fix for Pra | |
|
80
|
CVE-2026-43779 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | A logic issue was addressed with improved restrictions. This issue is fixed in m | |
|
80
|
CVE-2026-64702 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | An access issue was addressed with additional sandbox restrictions. This issue i | |
|
80
|
CVE-2026-1114 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | In parisneo/lollms version 2.1.0, the application's session management is vulner | |
|
80
|
CVE-2026-6023 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the R | |
|
80
|
CVE-2026-9711 |
9.8 | 0.0054 | NET NO AUTH LOW CX NO UI | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress (full | |
|
79
|
CVE-2026-39920 |
9.3 | 0.0054 | NET NO AUTH LOW CX NO UI | BridgeHead FileStore versions prior to 24A (released in early 2024) expose the A | |
|
78
|
CVE-2026-47660 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | Pathling is a set of tools that make it easier to use FHIR and clinical terminol | |
|
78
|
CVE-2024-7952 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | A data exposure vulnerability exists in the affected product. There are hardcode | |
|
78
|
CVE-2025-40797 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMA | |
|
78
|
CVE-2025-40798 |
8.7 | 0.0054 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMA | |
|
77
|
CVE-2026-27400 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Unauthenticated Arbitrary File Deletion in BookPro <= 1.1.0 versions. | |
|
77
|
CVE-2026-68791 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Incorrect authorization in Azure Machine Learning allows an unauthorized attacke | |
|
77
|
CVE-2026-78501 |
8.6 | 0.0054 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in a command ('command injectio | |
|
75
|
CVE-2026-33337 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Firebird is an open-source relational database management system. In versions pr | |
|
75
|
CVE-2026-114613 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1. | |
|
75
|
CVE-2026-41643 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go P | |
|
75
|
CVE-2026-11622 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A DNSSEC validating resolver that is under a random subdomain attack against a D | |
|
75
|
CVE-2026-28848 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | A buffer overflow was addressed with improved bounds checking. This issue is fix | |
|
75
|
CVE-2026-37453 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Insecure Permissions vulnerability in MSI NBFoundation Service v.2.0.2506.1201 a | |
|
75
|
CVE-2026-67867 |
7.5 | 0.0054 | NET NO AUTH LOW CX NO UI | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker t | |
|
70
|
CVE-2026-40783 |
9.9 | 0.0054 | NET LOW CX NO UI | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versi | |
|
68
|
CVE-2026-83943 |
8.7 | 0.0054 | NET NO AUTH NO UI | Exposure of sensitive information to an unauthorized actor in Azure API Center a | |
|
68
|
CVE-2026-67615 |
8.7 | 0.0054 | NET LOW CX NO UI | openEQUELLA before 2026.1.0 contains an authenticated remote code execution vuln | |
|
68
|
CVE-2025-52079 |
8.8 | 0.0054 | NET LOW CX NO UI | The administrator password setting of the D-Link DIR-820L 1.06B02 is has Imprope | |
|
68
|
CVE-2026-26944 |
8.8 | 0.0054 | NET NO AUTH LOW CX | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release ver | |
|
67
|
CVE-2026-18235 |
8.3 | 0.0054 | NET LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to exec | |
|
67
|
CVE-2026-69306 |
8.2 | 0.0054 | NET NO AUTH LOW CX | Not failing securely ('failing open') in Visual Studio Code allows an unauthoriz | |
|
67
|
CVE-2026-81356 |
8.2 | 0.0054 | NET NO AUTH LOW CX | Inconsistent interpretation of http requests ('http request/response smuggling') | |
|
67
|
CVE-2026-81378 |
8.2 | 0.0054 | NET NO AUTH LOW CX | Interpretation conflict in Visual Studio Code allows an unauthorized attacker to | |
|
67
|
CVE-2026-81379 |
8.2 | 0.0054 | NET NO AUTH LOW CX | Not failing securely ('failing open') in Visual Studio Code allows an unauthoriz | |
|
67
|
CVE-2026-17095 |
8.3 | 0.0054 | NET LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypa | |
|
66
|
CVE-2026-18781 |
8.1 | 0.0054 | NET NO AUTH NO UI | The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin befor | |
|
66
|
CVE-2026-62202 |
7.7 | 0.0054 | NET LOW CX NO UI | OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulner | |
|
66
|
CVE-2026-62778 |
8.1 | 0.0054 | NET NO AUTH NO UI | Use after free in Windows DNS allows an unauthorized attacker to elevate privile | |
|
66
|
CVE-2026-66802 |
8.1 | 0.0054 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-42900 |
8.1 | 0.0054 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-50460 |
8.1 | 0.0054 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-62820 |
8.1 | 0.0054 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-69782 |
8.1 | 0.0054 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-69827 |
8.1 | 0.0054 | NET NO AUTH NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
66
|
CVE-2026-64665 |
8.1 | 0.0054 | NET NO AUTH NO UI | Statamic is a Laravel and Git powered content management system (CMS). Prior to | |
|
65
|
CVE-2026-6122 |
7.4 | 0.0054 | NET LOW CX NO UI | A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is | |
|
65
|
CVE-2026-6133 |
7.4 | 0.0054 | NET LOW CX NO UI | A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. This affects th | |
|
65
|
CVE-2026-6136 |
7.4 | 0.0054 | NET LOW CX NO UI | A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Imp | |
|
64
|
CVE-2026-46627 |
7.1 | 0.0054 | NET LOW CX NO UI | Twig is a template language for PHP. Prior to 3.26.0, the Twig sandbox does not | |
|
64
|
CVE-2026-58296 |
7.1 | 0.0054 | NET NO AUTH LOW CX | Exposure of private personal information to an unauthorized actor in Microsoft E | |
|
64
|
CVE-2026-58297 |
7.1 | 0.0054 | NET NO AUTH LOW CX | Exposure of private personal information to an unauthorized actor in Microsoft E | |
|
62
|
CVE-2026-67243 |
8.6 | 0.0054 | NET LOW CX NO UI | freo2 provided by refirio contains an unrestricted upload of file with dangerous | |
|
54
|
CVE-2026-66396 |
9.3 | 0.0054 | NET LOW CX | SiYuan before v3.7.2 fails to escape the title-img Individual Attribute List val |