Hunt List
13,801 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
87
|
CVE-2026-80343 |
8.2 | 0.0052 | NET NO AUTH LOW CX NO UI | 1 PoC | Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP c |
|
80
|
CVE-2026-55572 |
10.0 | 0.0052 | NET NO AUTH LOW CX NO UI | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth | |
|
80
|
CVE-2026-30993 |
9.8 | 0.0052 | NET NO AUTH LOW CX NO UI | Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE | |
|
80
|
CVE-2023-0745 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The High Availability functionality of Yugabyte An | |
|
80
|
CVE-2026-16407 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Service Workers component. This vulnerability was | |
|
80
|
CVE-2026-99154 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: scsi: libis | |
|
80
|
CVE-2026-74406 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix | |
|
80
|
CVE-2026-89652 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: bound | |
|
80
|
CVE-2026-90037 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: NFSD: Preve | |
|
80
|
CVE-2024-51311 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51313 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51312 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51314 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
80
|
CVE-2024-51315 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the su | |
|
79
|
CVE-2026-64622 |
9.3 | 0.0052 | NET NO AUTH LOW CX NO UI | Network-AI (npm: network-ai) versions 5.12.2 through 5.13.3 fail to apply the co | |
|
79
|
CVE-2024-58307 |
9.3 | 0.0051 | NET NO AUTH LOW CX NO UI | CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the member | |
|
79
|
CVE-2026-56261 |
9.2 | 0.0051 | NET NO AUTH LOW CX NO UI | Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerabilit | |
|
78
|
CVE-2026-16762 |
8.7 | 0.0052 | NET NO AUTH LOW CX NO UI | An attacker able to supply a crafted XML document to an application using QXmlSt | |
|
78
|
CVE-2026-89650 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ceph: bound | |
|
78
|
CVE-2026-64551 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: sctp: valid | |
|
78
|
CVE-2026-19424 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Refe | |
|
78
|
CVE-2026-73622 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | GitPython before 3.1.55 fails to disable environment variable expansion in Remot | |
|
75
|
CVE-2026-41135 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source | |
|
75
|
CVE-2026-12691 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | Missing authentication for critical function vulnerability in Vimesoft Inc. Ente | |
|
75
|
CVE-2026-15322 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to | |
|
75
|
CVE-2026-52481 |
7.5 | 0.0052 | NET NO AUTH LOW CX NO UI | An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attack | |
|
75
|
CVE-2026-33257 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | An attacker can send a web request that causes unlimited memory allocation in th | |
|
75
|
CVE-2026-44240 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable | |
|
75
|
CVE-2026-115817 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Starman versions before 0.4019 for Perl allow a stalled request body to hold a w | |
|
75
|
CVE-2026-88041 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information | |
|
68
|
CVE-2026-113405 |
8.7 | 0.0052 | NET LOW CX NO UI | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenti | |
|
68
|
CVE-2026-113406 |
8.7 | 0.0052 | NET LOW CX NO UI | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenti | |
|
68
|
CVE-2026-112994 |
8.8 | 0.0051 | NET NO AUTH LOW CX | UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed | |
|
68
|
CVE-2026-113147 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 al | |
|
68
|
CVE-2026-41957 |
8.7 | 0.0051 | NET LOW CX NO UI | An authenticated remote code execution vulnerability through undisclosed vectors | |
|
68
|
CVE-2026-46519 |
8.8 | 0.0051 | NET LOW CX NO UI | mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster | |
|
68
|
CVE-2026-57280 |
8.8 | 0.0051 | NET LOW CX NO UI | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept | |
|
67
|
CVE-2026-73696 |
8.6 | 0.0052 | NET LOW CX NO UI | Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after | |
|
66
|
CVE-2026-70465 |
8.1 | 0.0052 | NET NO AUTH NO UI | A buffer copy without checking size of input ('classic buffer overflow') vulnera | |
|
66
|
CVE-2026-99064 |
8.1 | 0.0052 | NET NO AUTH NO UI | In the Linux kernel, the following vulnerability has been resolved: cipso: adju | |
|
66
|
CVE-2026-71407 |
8.1 | 0.0051 | NET NO AUTH NO UI | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet | |
|
65
|
CVE-2026-7470 |
7.4 | 0.0052 | NET LOW CX NO UI | A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected | |
|
65
|
CVE-2026-96187 |
7.4 | 0.0051 | NET NO AUTH LOW CX | Access of resource using incompatible type ('type confusion') in Microsoft Edge | |
|
64
|
CVE-2026-70472 |
7.1 | 0.0052 | NET LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
62
|
CVE-2026-32997 |
8.6 | 0.0051 | NET LOW CX NO UI | A vulnerability allowing an authenticated user with the Backup Administrator rol | |
|
60
|
CVE-2026-65984 |
7.5 | 0.0052 | NET LOW CX NO UI | FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In 1.3 | |
|
60
|
CVE-2026-101694 |
7.2 | 0.0051 | NET LOW CX NO UI | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su | |
|
59
|
CVE-2026-45261 |
9.3 | 0.0052 | NET LOW CX | GitButler is a modern Git-based version control interface for AI-powered workflo | |
|
55
|
CVE-2026-111255 |
7.5 | 0.0052 | NET NO UI | The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin | |
|
46
|
CVE-2025-8405 |
7.7 | 0.0052 | NET | GitLab has remediated a security issue in GitLab CE/EE affecting all versions fr |