Hunt List
13,787 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-35292 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
80
|
CVE-2026-35301 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
80
|
CVE-2026-46798 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46800 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-64812 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possib | |
|
80
|
CVE-2026-91231 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91221 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-35286 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-35293 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-35296 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-35310 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-35319 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-46783 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
80
|
CVE-2026-46797 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46801 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46878 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46879 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46880 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46890 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo | |
|
80
|
CVE-2026-46905 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46909 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-47846 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Bitnami Cassandra container images are affected by a retained default superuser | |
|
80
|
CVE-2026-56030 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions. | |
|
80
|
CVE-2026-56033 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. | |
|
79
|
CVE-2026-40044 |
9.3 | 0.0048 | NET NO AUTH LOW CX NO UI | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticate | |
|
79
|
CVE-2026-110475 |
9.3 | 0.0048 | NET NO AUTH LOW CX NO UI | This vulnerability exists in the CreditNirvana Collections Platform due to impro | |
|
79
|
CVE-2026-120442 |
9.3 | 0.0048 | NET NO AUTH LOW CX NO UI | ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that | |
|
78
|
CVE-2026-10560 |
9.1 | 0.0048 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerabi | |
|
77
|
CVE-2026-33689 |
8.7 | 0.0048 | NET NO AUTH LOW CX NO UI | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds | |
|
77
|
CVE-2026-55204 |
8.7 | 0.0048 | NET NO AUTH LOW CX NO UI | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer derefer | |
|
76
|
CVE-2026-43893 |
8.2 | 0.0049 | NET NO AUTH LOW CX NO UI | exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 3 | |
|
76
|
CVE-2026-64389 |
8.2 | 0.0049 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vali | |
|
75
|
CVE-2026-71241 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Book-Management-System's Flask API endpoints /student, /record, /books, /find_st | |
|
75
|
CVE-2026-52021 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacke | |
|
75
|
CVE-2026-110677 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecti | |
|
75
|
CVE-2026-110688 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use | |
|
75
|
CVE-2023-30367 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software tha | |
|
75
|
CVE-2026-5438 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | A gzip decompression bomb vulnerability exists when Orthanc processes HTTP reque | |
|
70
|
CVE-2026-71195 |
9.9 | 0.0048 | NET LOW CX NO UI | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shar | |
|
70
|
CVE-2026-120307 |
9.9 | 0.0048 | NET LOW CX NO UI | The Beta9 worker serves the sandbox file API from outside the container. getHost | |
|
68
|
CVE-2026-58076 |
8.8 | 0.0048 | NET LOW CX NO UI | Apache Airflow's serialization layer reconstructed exception nodes by calling `i | |
|
68
|
CVE-2026-114135 |
8.8 | 0.0048 | NET LOW CX NO UI | Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6 | |
|
67
|
CVE-2026-76221 |
8.7 | 0.0049 | NET LOW CX NO UI | GitPython before 3.1.58 contains a config-name injection vulnerability in the op | |
|
67
|
CVE-2026-33981 |
8.3 | 0.0048 | NET LOW CX NO UI | changedetection.io is a free open source web page change detection tool. Prior t | |
|
66
|
CVE-2026-56428 |
8.1 | 0.0048 | NET NO AUTH NO UI | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-spe | |
|
66
|
CVE-2025-67920 |
8.1 | 0.0048 | NET NO AUTH NO UI | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP | |
|
65
|
CVE-2026-39420 |
7.4 | 0.0049 | NET LOW CX NO UI | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below | |
|
64
|
CVE-2026-55474 |
7.1 | 0.0048 | NET LOW CX NO UI | Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogCont | |
|
62
|
CVE-2026-112904 |
8.7 | 0.0049 | NET LOW CX NO UI | Vvveb is a powerful and easy to use CMS with page builder to build websites, blo | |
|
62
|
CVE-2026-120487 |
8.6 | 0.0048 | NET LOW CX NO UI | LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in |