Hunt List
13 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
98
|
CVE-2026-55040 |
9.1 | 0.6954 | NET NO AUTH LOW CX NO UI | KEV 5 PoC | Microsoft SharePoint contains a weak authentication vulnerability which allows a |
|
90
|
CVE-2026-69836 |
10.0 | 0.0153 | NET NO AUTH LOW CX NO UI | 2 PoC | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized a |
|
90
|
CVE-2026-55944 |
9.8 | 0.0153 | NET NO AUTH LOW CX NO UI | 1 PoC | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthoriz |
|
90
|
CVE-2026-56190 |
9.8 | 0.0097 | NET NO AUTH LOW CX NO UI | 1 PoC | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to |
|
90
|
CVE-2026-62878 |
9.8 | 0.0097 | NET NO AUTH LOW CX NO UI | 1 PoC | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to ex |
|
90
|
CVE-2026-105192 |
9.8 | 0.0077 | NET NO AUTH LOW CX NO UI | 1 PoC | LMCache multiprocess mode, also called distributed mode, opens an unauthenticate |
|
88
|
CVE-2026-109618 |
9.2 | 1.0000 | NET NO AUTH NO UI | KEV 710 PoC | PHP contains an out-of-memory corruption vulnerability that allows for unauthent |
|
79
|
CVE-2026-65660 |
8.8 | 0.0819 | NET LOW CX NO UI | KEV 2 PoC | Microsoft SharePoint contains a code injection vulnerability which could allow a |
|
78
|
CVE-2026-24301 |
8.8 | 0.0111 | NET NO AUTH LOW CX | 1 PoC | Improper neutralization of special elements used in a command ('command injectio |
|
78
|
CVE-2026-49179 |
8.8 | 0.0086 | NET NO AUTH LOW CX | 1 PoC | Improper neutralization of special elements used in a command ('command injectio |
|
78
|
CVE-2026-54121 |
8.8 | 0.0078 | NET LOW CX NO UI | 15 PoC | Improper authorization in Active Directory Certificate Services (AD CS) allows a |
|
76
|
CVE-2026-63520 |
8.1 | 0.0096 | NET NO AUTH NO UI | 1 PoC | Improper input validation in Microsoft Office SharePoint allows an unauthorized |
|
66
|
CVE-2026-62911 |
8.0 | 0.0069 | NET LOW CX | 3 PoC | Authentication bypass by capture-replay in Microsoft Exchange Server allows an a |