Hunt List
8,521 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-61620 |
9.8 | 0.0039 | NET NO AUTH LOW CX NO UI | HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, appl | |
|
78
|
CVE-2026-3298 |
8.8 | 0.0039 | NET NO AUTH LOW CX NO UI | The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) | |
|
76
|
CVE-2026-46866 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
76
|
CVE-2026-57688 |
8.2 | 0.0039 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions. | |
|
69
|
CVE-2026-35044 |
9.6 | 0.0039 | NET NO AUTH LOW CX | BentoML is a Python library for building online serving systems optimized for AI | |
|
68
|
CVE-2026-60424 |
9.0 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-61201 |
9.0 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise CRM Common Objects product of Oracle | |
|
68
|
CVE-2026-61223 |
9.0 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Communications Converged Application Server product | |
|
68
|
CVE-2026-61029 |
9.0 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-70980 |
9.0 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
68
|
CVE-2026-5280 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a r | |
|
68
|
CVE-2026-5286 |
8.8 | 0.0039 | NET NO AUTH LOW CX | Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote | |
|
66
|
CVE-2026-60169 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve | |
|
66
|
CVE-2026-60192 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec | |
|
66
|
CVE-2026-60201 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-60222 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60273 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60277 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60312 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-60416 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
66
|
CVE-2026-60417 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-60450 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-60462 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-60543 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
66
|
CVE-2026-60558 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-60621 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
66
|
CVE-2026-60670 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Bu | |
|
66
|
CVE-2026-60756 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp | |
|
66
|
CVE-2026-60780 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone | |
|
66
|
CVE-2026-60785 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (com | |
|
66
|
CVE-2026-60979 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (compon | |
|
66
|
CVE-2026-61074 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of | |
|
66
|
CVE-2026-61092 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
66
|
CVE-2026-61106 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in Oracle GoldenGate (component: Config Service Executable). Supp | |
|
66
|
CVE-2026-61137 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon | |
|
66
|
CVE-2026-61163 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
66
|
CVE-2026-61170 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
66
|
CVE-2026-61225 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Communications Converged Application Server product | |
|
66
|
CVE-2026-62547 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (compone | |
|
66
|
CVE-2026-60742 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-60831 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS | |
|
66
|
CVE-2026-60992 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
66
|
CVE-2026-61229 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-61265 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD | |
|
66
|
CVE-2026-61293 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyper | |
|
66
|
CVE-2026-61307 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product | |
|
66
|
CVE-2026-62471 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-62501 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-62531 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-70675 |
8.1 | 0.0039 | NET NO AUTH NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar |