Hunt List
13,779 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-53412 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client fo | |
|
80
|
CVE-2026-79858 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AO | |
|
80
|
CVE-2026-15982 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Too | |
|
80
|
CVE-2025-60355 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template | |
|
80
|
CVE-2026-63808 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: exfat: fix | |
|
80
|
CVE-2026-74985 |
9.8 | 0.0053 | NET NO AUTH LOW CX NO UI | Privilege escalation in the Enterprise Policies component. This vulnerability wa | |
|
79
|
CVE-2026-115812 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Relative path traversal during model archive extraction in Amazon Web Services M | |
|
79
|
CVE-2025-40771 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) | |
|
79
|
CVE-2026-55445 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | Qinglong is a timed task management platform supporting Python3, JavaScript, She | |
|
79
|
CVE-2026-114108 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vul | |
|
79
|
CVE-2026-15378 |
9.3 | 0.0053 | NET NO AUTH LOW CX NO UI | A flaw was found in the `guardrails-detectors` component. This vulnerability all | |
|
79
|
CVE-2026-5189 |
9.2 | 0.0053 | NET NO AUTH LOW CX NO UI | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager vers | |
|
78
|
CVE-2026-72575 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | An improper authorization vulnerability in daptin through v0.12.34 allows unauth | |
|
78
|
CVE-2026-112399 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate | |
|
78
|
CVE-2026-18670 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c | |
|
78
|
CVE-2025-68809 |
9.1 | 0.0053 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: | |
|
78
|
CVE-2012-20002 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path trav | |
|
78
|
CVE-2016-20100 |
8.7 | 0.0053 | NET NO AUTH LOW CX NO UI | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path trav | |
|
77
|
CVE-2026-15583 |
8.6 | 0.0053 | NET NO AUTH LOW CX NO UI | A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote at | |
|
75
|
CVE-2026-28969 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | A use after free issue was addressed with improved memory management. This issue | |
|
75
|
CVE-2026-55760 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | Handlebars.java provides logic-less and semantic Mustache templates with Java. P | |
|
75
|
CVE-2026-75887 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | A flaw was found in the OpenShift console. An unauthenticated attacker can explo | |
|
75
|
CVE-2026-24146 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | NVIDIA Triton Inference Server contains a vulnerability where insufficient input | |
|
75
|
CVE-2026-106808 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerabi | |
|
75
|
CVE-2026-112365 |
7.2 | 0.0053 | NET NO AUTH LOW CX NO UI | The easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hi | |
|
75
|
CVE-2026-44840 |
7.5 | 0.0053 | NET NO AUTH LOW CX NO UI | Dgraph is an open source distributed GraphQL database. Prior to version 25.3.4, | |
|
70
|
CVE-2026-120308 |
9.9 | 0.0053 | NET LOW CX NO UI | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task | |
|
69
|
CVE-2026-17680 |
9.6 | 0.0053 | NET NO AUTH LOW CX | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.7 | |
|
69
|
CVE-2026-44789 |
9.4 | 0.0053 | NET LOW CX NO UI | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, a | |
|
69
|
CVE-2026-62834 |
9.3 | 0.0053 | NET NO AUTH LOW CX | Improper verification of cryptographic signature in Azure Data Factory allows an | |
|
68
|
CVE-2026-18258 |
8.8 | 0.0053 | NET LOW CX NO UI | Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and | |
|
68
|
CVE-2026-113103 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Race condition in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113163 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Buffer overflow in WebGL in Google Chrome on on Android prior to 156.0.8078.47 a | |
|
68
|
CVE-2026-113230 |
8.8 | 0.0053 | NET NO AUTH LOW CX | UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113058 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Missing authorization in WebUI in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113127 |
8.8 | 0.0053 | NET NO AUTH LOW CX | Confused deputy in Browser in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-9196 |
8.8 | 0.0053 | NET LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to e | |
|
67
|
CVE-2026-55665 |
8.5 | 0.0053 | NET NO AUTH LOW CX | Grist is spreadsheet software using Python as its formula language. Prior to 1.7 | |
|
66
|
CVE-2023-35947 |
8.1 | 0.0053 | NET NO AUTH NO UI | Gradle is a build tool with a focus on build automation and support for multi-la | |
|
66
|
CVE-2026-83947 |
7.7 | 0.0053 | NET LOW CX NO UI | Missing authorization in Azure Event Grid allows an authorized attacker to perfo | |
|
66
|
CVE-2026-73137 |
7.7 | 0.0053 | NET LOW CX NO UI | A flaw was found in the multicloud-operators-subscription component of Red Hat A | |
|
65
|
CVE-2026-6137 |
7.4 | 0.0053 | NET LOW CX NO UI | A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected elem | |
|
64
|
CVE-2024-58380 |
7.1 | 0.0053 | NET LOW CX NO UI | PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability i | |
|
64
|
CVE-2026-69244 |
7.1 | 0.0053 | NET NO AUTH LOW CX | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. | |
|
63
|
CVE-2026-60026 |
8.9 | 0.0053 | NET LOW CX NO UI | Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Pag | |
|
62
|
CVE-2026-73670 |
8.6 | 0.0053 | NET LOW CX NO UI | A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 th | |
|
62
|
CVE-2026-58074 |
8.6 | 0.0053 | NET LOW CX NO UI | A vulnerability allowing a high-privileged user to execute arbitrary code on the | |
|
59
|
CVE-2026-54527 |
9.3 | 0.0053 | NET LOW CX | JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, t | |
|
58
|
CVE-2026-68899 |
8.7 | 0.0053 | NET LOW CX | Wekan is open source kanban built with Meteor. Prior to 9.90, isFileValid() in m | |
|
52
|
CVE-2026-9292 |
8.4 | 0.0053 | NET LOW CX | A Stored Cross-Site Scripting security issue exists within FactoryTalk® DataMosa |