Hunt List
13,141 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-47056 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60217 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60358 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
80
|
CVE-2026-60360 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-60379 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-60389 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-60644 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-61241 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-70880 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
80
|
CVE-2026-91216 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46857 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
80
|
CVE-2026-46859 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
80
|
CVE-2026-35290 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46876 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46924 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46982 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl | |
|
80
|
CVE-2026-46983 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl | |
|
80
|
CVE-2026-46994 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
80
|
CVE-2026-47036 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon | |
|
80
|
CVE-2026-60173 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: | |
|
80
|
CVE-2026-60197 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60198 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60199 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60200 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60202 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60204 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60205 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60209 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60210 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60212 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60215 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
78
|
CVE-2026-7821 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0. | |
|
78
|
CVE-2026-55954 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple all | |
|
78
|
CVE-2026-64392 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use | |
|
78
|
CVE-2026-67183 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthent | |
|
78
|
CVE-2026-74892 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in | |
|
78
|
CVE-2026-118689 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in Ovt | |
|
78
|
CVE-2025-34457 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit | |
|
77
|
CVE-2026-17485 |
8.2 | 0.0051 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of | |
|
75
|
CVE-2026-34020 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache O | |
|
75
|
CVE-2026-107630 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | The Email Templates Customizer and Designer for WordPress and WooCommerce plugin | |
|
68
|
CVE-2026-5287 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote | |
|
68
|
CVE-2026-55723 |
8.7 | 0.0051 | NET LOW CX NO UI | When NGINX Ingress Controller is configured with Custom Resource Definitions (CR | |
|
68
|
CVE-2026-109428 |
8.7 | 0.0051 | NET NO AUTH LOW CX | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability | |
|
64
|
CVE-2026-65316 |
7.1 | 0.0051 | NET LOW CX NO UI | XXL-Job version 2.4.2 contains an insecure direct object reference vulnerability | |
|
60
|
CVE-2026-5959 |
7.5 | 0.0051 | NET LOW CX NO UI | A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL | |
|
55
|
CVE-2026-50379 |
7.5 | 0.0051 | NET NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
55
|
CVE-2026-56648 |
7.5 | 0.0051 | NET NO UI | Time-of-check time-of-use (toctou) race condition in Windows Network File System | |
|
55
|
CVE-2026-58531 |
7.5 | 0.0051 | NET NO UI | Concurrent execution using shared resource with improper synchronization ('race | |
|
55
|
CVE-2026-69804 |
7.5 | 0.0051 | NET NO UI | Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint |