Hunt List
12,844 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
76
|
CVE-2026-71264 |
8.2 | 0.0033 | NET NO AUTH LOW CX NO UI | WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serve | |
|
75
|
CVE-2026-40115 |
7.5 | 0.0033 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to 4.5.128, the WSGI-based recipe | |
|
68
|
CVE-2026-6318 |
8.8 | 0.0033 | NET NO AUTH LOW CX | Use after free in Codecs in Google Chrome prior to 147.0.7727.101 allowed a remo | |
|
68
|
CVE-2026-13825 |
8.8 | 0.0033 | NET NO AUTH LOW CX | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remo | |
|
68
|
CVE-2026-118330 |
8.8 | 0.0033 | NET NO AUTH LOW CX | Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 | |
|
66
|
CVE-2026-5120 |
8.1 | 0.0033 | NET LOW CX NO UI | A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 throu | |
|
65
|
CVE-2026-66661 |
7.7 | 0.0033 | NET NO AUTH NO UI | Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions. | |
|
65
|
CVE-2026-34587 |
7.6 | 0.0033 | NET LOW CX NO UI | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5 | |
|
57
|
CVE-2026-47033 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Contracts Integration product of Oracle E-Business S | |
|
57
|
CVE-2026-60193 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec | |
|
57
|
CVE-2026-60295 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
57
|
CVE-2026-60330 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
57
|
CVE-2026-61312 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
57
|
CVE-2026-60841 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
57
|
CVE-2026-60849 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
57
|
CVE-2026-61212 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
57
|
CVE-2026-62590 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
57
|
CVE-2026-62615 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
57
|
CVE-2026-70859 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
57
|
CVE-2026-71062 |
8.5 | 0.0033 | NET NO UI | Vulnerability in the RDBMS component of Oracle Database Server. Supported versi | |
|
55
|
CVE-2026-5277 |
7.5 | 0.0033 | NET NO AUTH | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 al | |
|
55
|
CVE-2026-46941 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite ( | |
|
55
|
CVE-2026-60495 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne Requirements Planning product of O | |
|
55
|
CVE-2026-60496 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne Advanced Pricing - Procurement pro | |
|
55
|
CVE-2026-60497 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne CRM Foundation product of Oracle J | |
|
55
|
CVE-2026-60498 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product | |
|
55
|
CVE-2026-60598 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle | |
|
55
|
CVE-2026-60604 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle | |
|
55
|
CVE-2026-60619 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle J | |
|
55
|
CVE-2026-60770 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Application Object Library product of Oracle E-Busin | |
|
55
|
CVE-2026-60806 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite ( | |
|
55
|
CVE-2026-60855 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (componen | |
|
55
|
CVE-2026-60859 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (componen | |
|
55
|
CVE-2026-60894 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen | |
|
55
|
CVE-2026-60927 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Busines | |
|
55
|
CVE-2026-60931 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Public Sector Financials product of Oracle E-Busines | |
|
55
|
CVE-2026-60943 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Busi | |
|
55
|
CVE-2026-60988 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Busin | |
|
55
|
CVE-2026-61114 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Application Object Library product of Oracle E-Busin | |
|
55
|
CVE-2026-61141 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite | |
|
55
|
CVE-2026-61188 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
55
|
CVE-2026-61337 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Bus | |
|
55
|
CVE-2026-62493 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo | |
|
55
|
CVE-2026-62495 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Process Manufacturing Process Execution product of O | |
|
55
|
CVE-2026-60370 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion | |
|
55
|
CVE-2026-60679 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
55
|
CVE-2026-60769 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c | |
|
55
|
CVE-2026-60956 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne US Payroll product of Oracle JD Ed | |
|
55
|
CVE-2026-62481 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
55
|
CVE-2026-70706 |
7.5 | 0.0033 | NET NO UI | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: |