Hunt List
12,807 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
77
|
CVE-2026-32993 |
8.3 | 0.0030 | NET NO AUTH LOW CX NO UI | Improper sanitization of the `status` query parameter of the `/unprotected/nova_ | |
|
77
|
CVE-2026-56063 |
8.3 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. | |
|
76
|
CVE-2026-42273 |
7.8 | 0.0030 | NET NO AUTH LOW CX NO UI | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision serv | |
|
75
|
CVE-2026-54840 |
7.3 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. | |
|
75
|
CVE-2026-59535 |
7.3 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Thrive Product Manager <= 10.9.2 versio | |
|
75
|
CVE-2026-65541 |
7.3 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions. | |
|
75
|
CVE-2026-28188 |
7.3 | 0.0030 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions. | |
|
74
|
CVE-2026-96669 |
7.2 | 0.0030 | NET NO AUTH LOW CX NO UI | The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerabl | |
|
74
|
CVE-2026-115821 |
7.2 | 0.0030 | NET NO AUTH LOW CX NO UI | The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site Scripting | |
|
70
|
CVE-2026-46893 |
9.9 | 0.0030 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle J | |
|
68
|
CVE-2026-8529 |
8.8 | 0.0030 | NET NO AUTH LOW CX | Heap buffer overflow in Codecs in Google Chrome prior to 148.0.7778.168 allowed | |
|
68
|
CVE-2026-49062 |
8.8 | 0.0030 | NET LOW CX NO UI | Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Eng | |
|
68
|
CVE-2026-46972 |
8.8 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Or | |
|
67
|
CVE-2026-83379 |
8.7 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi | |
|
67
|
CVE-2026-87300 |
8.7 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi | |
|
67
|
CVE-2026-42860 |
8.5 | 0.0030 | NET LOW CX NO UI | The Open edx Enterprise Service app provides enterprise features to the Open edX | |
|
67
|
CVE-2026-71280 |
8.5 | 0.0030 | NET LOW CX NO UI | go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-suppli | |
|
66
|
CVE-2026-34375 |
8.2 | 0.0030 | NET NO AUTH LOW CX | WWBN AVideo is an open source video platform. In versions up to and including 26 | |
|
65
|
CVE-2026-91450 |
7.4 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone | |
|
65
|
CVE-2026-61324 |
7.7 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite | |
|
65
|
CVE-2026-111460 |
7.7 | 0.0030 | NET NO AUTH LOW CX | A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Ser | |
|
65
|
CVE-2026-101783 |
7.4 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
65
|
CVE-2026-101829 |
7.4 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Busine | |
|
65
|
CVE-2026-87314 |
7.4 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
65
|
CVE-2026-91272 |
7.4 | 0.0030 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
65
|
CVE-2026-111079 |
7.4 | 0.0030 | NET NO AUTH LOW CX | A flaw was found in Goose. When the terminal integration feature is enabled, the | |
|
64
|
CVE-2026-42553 |
7.1 | 0.0030 | NET LOW CX NO UI | Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who s | |
|
64
|
CVE-2026-8406 |
7.1 | 0.0030 | NET LOW CX NO UI | openSIS Classic 9.3 contains an insecure direct object reference vulnerability i | |
|
64
|
CVE-2026-47726 |
7.1 | 0.0030 | NET LOW CX NO UI | nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private | |
|
64
|
CVE-2026-61455 |
7.1 | 0.0030 | NET LOW CX NO UI | Grav before 2.0.1 contains a decompression bomb vulnerability in ZipArchiver::ex | |
|
64
|
CVE-2026-65710 |
7.1 | 0.0030 | NET LOW CX NO UI | sysPass through version 3.2.11 contains a missing authorization vulnerability th | |
|
60
|
CVE-2026-47169 |
7.5 | 0.0030 | NET LOW CX NO UI | Quest Bot is an opensource modern Discord Bot built for moderation, utilities an | |
|
57
|
CVE-2026-10632 |
8.7 | 0.0030 | NET LOW CX | A reflected cross-site scripting vulnerability in the Classic Web Client of Zimb | |
|
57
|
CVE-2026-50053 |
8.7 | 0.0030 | NET LOW CX | A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) a | |
|
57
|
CVE-2026-83393 |
8.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp | |
|
55
|
CVE-2026-13824 |
7.5 | 0.0030 | NET NO AUTH | Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.78 | |
|
55
|
CVE-2026-13856 |
7.5 | 0.0030 | NET NO AUTH | Insufficient validation of untrusted input in Speech in Google Chrome on Android | |
|
55
|
CVE-2026-13891 |
7.5 | 0.0030 | NET NO AUTH | Insufficient validation of untrusted input in Extensions in Google Chrome prior | |
|
55
|
CVE-2026-14115 |
7.5 | 0.0030 | NET NO AUTH | Insufficient validation of untrusted input in Cast in Google Chrome prior to 150 | |
|
55
|
CVE-2026-101820 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c | |
|
55
|
CVE-2026-101823 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite | |
|
55
|
CVE-2026-101825 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business | |
|
55
|
CVE-2026-101826 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business | |
|
55
|
CVE-2026-87312 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
55
|
CVE-2026-91321 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: | |
|
55
|
CVE-2026-91496 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor | |
|
55
|
CVE-2026-91604 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ | |
|
55
|
CVE-2026-91226 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
55
|
CVE-2026-91229 |
7.5 | 0.0030 | NET NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
54
|
CVE-2026-87358 |
7.1 | 0.0030 | NET NO UI | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c |