Hunt List
13,219 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
85
|
CVE-2026-75157 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | 1 PoC | Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-a |
|
78
|
CVE-2026-65889 |
9.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < | |
|
77
|
CVE-2026-60293 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-60431 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com | |
|
77
|
CVE-2026-60556 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
75
|
CVE-2026-42582 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Netty is an asynchronous, event-driven network application framework. Prior to 4 | |
|
75
|
CVE-2026-57231 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a | |
|
75
|
CVE-2026-60167 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve | |
|
75
|
CVE-2026-60554 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
75
|
CVE-2026-61116 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Application Object Library product of Oracle E-Busin | |
|
75
|
CVE-2026-61133 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon | |
|
75
|
CVE-2026-61159 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-60393 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
75
|
CVE-2026-73878 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73883 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73884 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-3902 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4 | |
|
75
|
CVE-2026-7040 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow | |
|
75
|
CVE-2026-72692 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | A missing authorization vulnerability in OpenSignLabs opensignserver through 2.3 | |
|
75
|
CVE-2026-73249 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoi | |
|
69
|
CVE-2026-52703 |
9.6 | 0.0044 | NET NO AUTH LOW CX | Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. | |
|
69
|
CVE-2026-13901 |
9.6 | 0.0044 | NET NO AUTH LOW CX | Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.4 | |
|
69
|
CVE-2026-116232 |
9.4 | 0.0044 | NET LOW CX NO UI | A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the | |
|
69
|
CVE-2026-34660 |
9.3 | 0.0044 | NET NO AUTH LOW CX | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Inco | |
|
68
|
CVE-2026-14407 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allow | |
|
68
|
CVE-2026-16362 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixe | |
|
68
|
CVE-2026-17922 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922. | |
|
67
|
CVE-2026-56448 |
8.3 | 0.0044 | NET LOW CX NO UI | A path traversal vulnerability exists in AIL Framework before the release contai | |
|
67
|
CVE-2026-58077 |
8.7 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 | |
|
67
|
CVE-2026-58148 |
8.7 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Jo | |
|
67
|
CVE-2026-120315 |
8.7 | 0.0044 | NET LOW CX NO UI | LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability | |
|
67
|
CVE-2026-57833 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 | |
|
67
|
CVE-2026-50190 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerab | |
|
67
|
CVE-2026-76612 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled | |
|
67
|
CVE-2026-77027 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - | |
|
67
|
CVE-2026-116231 |
8.6 | 0.0044 | NET LOW CX NO UI | A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacte | |
|
66
|
CVE-2026-101770 |
8.1 | 0.0044 | NET NO AUTH NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
66
|
CVE-2026-56031 |
8.1 | 0.0044 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. | |
|
64
|
CVE-2026-11917 |
7.2 | 0.0044 | NET LOW CX NO UI | A path traversal security issue exists within Rockwell Automation ThinManager® s | |
|
64
|
CVE-2026-65050 |
7.1 | 0.0044 | NET LOW CX NO UI | Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authori | |
|
64
|
CVE-2026-47145 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to as | |
|
64
|
CVE-2026-47146 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to as | |
|
64
|
CVE-2026-47148 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigg | |
|
64
|
CVE-2026-47149 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, malformed or out-of-range Door Lock user identi | |
|
64
|
CVE-2026-47152 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, a malformed Level Control Move command can term | |
|
64
|
CVE-2026-47153 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, a malformed Level Control Step command can term | |
|
64
|
CVE-2026-47154 |
7.1 | 0.0044 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, a malformed GetProfileResponse message can trig | |
|
59
|
CVE-2026-44852 |
7.2 | 0.0044 | NET LOW CX NO UI | An authenticated remote code execution vulnerability exists in the AOS-8 and AOS | |
|
55
|
CVE-2026-55081 |
7.3 | 0.0044 | NET LOW CX | DHIS2 is a flexible information system for data capture, management, validation, | |
|
44
|
CVE-2026-69364 |
7.1 | 0.0044 | NET | Concurrent execution using shared resource with improper synchronization ('race |