Hunt List
12,825 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-46978 |
10.0 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote | |
|
80
|
CVE-2026-1950 |
9.8 | 0.0031 | NET NO AUTH LOW CX NO UI | Delta Electronics AS320T has No checking of the length of the buffer with the f | |
|
78
|
CVE-2026-116207 |
8.8 | 0.0031 | NET NO AUTH LOW CX NO UI | YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unau | |
|
77
|
CVE-2026-76234 |
8.7 | 0.0031 | NET NO AUTH LOW CX NO UI | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, con | |
|
77
|
CVE-2026-117604 |
8.7 | 0.0031 | NET NO AUTH LOW CX NO UI | Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger: | |
|
77
|
CVE-2026-91212 |
8.6 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
77
|
CVE-2026-61542 |
8.6 | 0.0031 | NET NO AUTH LOW CX NO UI | Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger | |
|
77
|
CVE-2026-73929 |
8.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
77
|
CVE-2026-73931 |
8.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-41273 |
7.7 | 0.0031 | NET NO AUTH LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
75
|
CVE-2026-28873 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | This issue was addressed with additional entitlement checks. This issue is fixed | |
|
75
|
CVE-2026-22010 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Financial Services Analytical Applications Infrastru | |
|
75
|
CVE-2026-34310 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Financial Services Analytical Applications Infrastru | |
|
75
|
CVE-2026-34320 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Financial Services Customer Screening product of Ora | |
|
75
|
CVE-2026-44447 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16 | |
|
75
|
CVE-2026-91493 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
75
|
CVE-2026-78058 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC | |
|
75
|
CVE-2026-8822 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functi | |
|
75
|
CVE-2026-8824 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInfo | |
|
75
|
CVE-2026-9536 |
7.5 | 0.0031 | NET NO AUTH LOW CX NO UI | A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader Find | |
|
75
|
CVE-2026-35314 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
75
|
CVE-2026-46990 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
75
|
CVE-2026-60143 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone | |
|
75
|
CVE-2026-61136 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon | |
|
75
|
CVE-2026-61267 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Busi | |
|
75
|
CVE-2026-61271 |
7.3 | 0.0031 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Document Management and Collaboration product of Ora | |
|
69
|
CVE-2026-118308 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote a | |
|
69
|
CVE-2026-118309 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Improper input validation in UI in Google Chrome on on Android prior to 156.0.80 | |
|
69
|
CVE-2026-118310 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Improper input validation in Views in Google Chrome on on Windows prior to 156.0 | |
|
69
|
CVE-2026-118312 |
9.6 | 0.0031 | NET NO AUTH LOW CX | Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a rem | |
|
68
|
CVE-2026-7988 |
8.8 | 0.0031 | NET NO AUTH LOW CX | Type Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remot | |
|
68
|
CVE-2026-8016 |
8.8 | 0.0031 | NET NO AUTH LOW CX | Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remot | |
|
68
|
CVE-2026-12441 |
8.8 | 0.0031 | NET NO AUTH LOW CX | Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 a | |
|
68
|
CVE-2026-20312 |
8.8 | 0.0031 | NET LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
67
|
CVE-2026-47181 |
8.7 | 0.0031 | NET LOW CX NO UI | PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, | |
|
66
|
CVE-2026-39567 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions. | |
|
66
|
CVE-2026-40753 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions. | |
|
66
|
CVE-2026-39442 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions. | |
|
66
|
CVE-2026-39556 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Konsept <= 1.9 versions. | |
|
66
|
CVE-2026-39560 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions. | |
|
66
|
CVE-2026-40733 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions. | |
|
66
|
CVE-2026-40738 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions. | |
|
66
|
CVE-2026-40752 |
8.1 | 0.0031 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions. | |
|
65
|
CVE-2026-59804 |
7.6 | 0.0031 | NET NO AUTH LOW CX | Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missi | |
|
65
|
CVE-2026-34746 |
7.7 | 0.0031 | NET LOW CX NO UI | Payload is a free and open source headless content management system. Prior to v | |
|
65
|
CVE-2026-47269 |
7.4 | 0.0031 | NET NO AUTH NO UI | pam_usb provides hardware authentication for Linux using ordinary removable medi | |
|
64
|
CVE-2026-47697 |
7.1 | 0.0031 | NET LOW CX NO UI | Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is | |
|
57
|
CVE-2026-56308 |
8.4 | 0.0031 | NET LOW CX | Capgo before 12.128.2 allows email address changes without requiring current pas | |
|
55
|
CVE-2026-7897 |
7.5 | 0.0031 | NET NO AUTH | Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed | |
|
55
|
CVE-2026-46419 |
7.5 | 0.0031 | NET NO UI | Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorr |