Hunt List
13,152 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
79
|
CVE-2026-45010 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.2 contains an improper restriction of excessive authenticati | |
|
78
|
CVE-2026-72804 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph | |
|
78
|
CVE-2026-116014 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStr | |
|
78
|
CVE-2026-16370 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed | |
|
78
|
CVE-2026-16380 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Networking component. This vulnerability was fixed in F | |
|
78
|
CVE-2026-16394 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the DOM: Security component. This vulnerability was fixed i | |
|
78
|
CVE-2026-16406 |
9.1 | 0.0043 | NET NO AUTH LOW CX NO UI | Mitigation bypass in the Networking component. This vulnerability was fixed in F | |
|
69
|
CVE-2026-42811 |
9.4 | 0.0043 | NET LOW CX NO UI | In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials | |
|
68
|
CVE-2026-46864 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
68
|
CVE-2026-34035 |
8.8 | 0.0043 | NET LOW CX NO UI | Coolify is an open-source and self-hostable tool for managing servers, applicati | |
|
68
|
CVE-2026-46992 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
68
|
CVE-2026-46995 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
68
|
CVE-2026-47004 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
68
|
CVE-2026-47031 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite | |
|
68
|
CVE-2026-47037 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
68
|
CVE-2026-60157 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in Oracle GoldenGate (component: Service Manager). Supported vers | |
|
68
|
CVE-2026-60175 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the RDBMS component of Oracle Database Server. Supported versi | |
|
68
|
CVE-2026-60203 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-60207 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-60218 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
68
|
CVE-2026-60268 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
68
|
CVE-2026-60313 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-60334 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60343 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-60398 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices). | |
|
68
|
CVE-2026-60400 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Suppor | |
|
68
|
CVE-2026-60419 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60423 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60430 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60464 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
68
|
CVE-2026-60465 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
68
|
CVE-2026-60472 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
68
|
CVE-2026-60489 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle J | |
|
68
|
CVE-2026-60490 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle J | |
|
68
|
CVE-2026-60493 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product | |
|
68
|
CVE-2026-60499 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Solution Advisor product of Oracle | |
|
68
|
CVE-2026-60503 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
68
|
CVE-2026-60539 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
68
|
CVE-2026-60545 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl | |
|
68
|
CVE-2026-60549 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl | |
|
68
|
CVE-2026-60563 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-60583 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Transportation Management product of Oracle Supply C | |
|
68
|
CVE-2026-60594 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle | |
|
68
|
CVE-2026-60602 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise CS Student Financials product of Orac | |
|
68
|
CVE-2026-60603 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle | |
|
68
|
CVE-2026-60618 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Procurement and Subcontract Manage | |
|
68
|
CVE-2026-60654 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60655 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60656 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-60675 |
8.8 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Applications Framework product of Oracle E-Business |