Hunt List
8,519 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-39583 |
9.8 | 0.0036 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 | |
|
80
|
CVE-2026-46846 |
10.0 | 0.0036 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-91491 |
9.8 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
80
|
CVE-2026-56453 |
9.8 | 0.0035 | NET NO AUTH LOW CX NO UI | HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vu | |
|
79
|
CVE-2026-53776 |
9.3 | 0.0036 | NET NO AUTH LOW CX NO UI | Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote | |
|
79
|
CVE-2026-111811 |
9.4 | 0.0036 | NET NO AUTH LOW CX NO UI | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated ne | |
|
79
|
CVE-2026-112866 |
9.3 | 0.0036 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-44258 |
9.3 | 0.0036 | NET NO AUTH LOW CX NO UI | efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the elfinder_check | |
|
79
|
CVE-2026-48046 |
9.3 | 0.0036 | NET NO AUTH LOW CX NO UI | Streambert is a cross-platform Electron Desktop App to stream and download video | |
|
78
|
CVE-2026-34374 |
9.1 | 0.0036 | NET NO AUTH LOW CX NO UI | WWBN AVideo is an open source video platform. In versions up to and including 26 | |
|
78
|
CVE-2026-46910 |
9.1 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
77
|
CVE-2026-42737 |
8.6 | 0.0036 | NET NO AUTH LOW CX NO UI | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v | |
|
77
|
CVE-2026-34455 |
8.7 | 0.0036 | NET NO AUTH LOW CX NO UI | Hi.Events is an open-source event management and ticket selling platform. From v | |
|
77
|
CVE-2026-111107 |
8.7 | 0.0036 | NET NO AUTH LOW CX NO UI | A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management | |
|
77
|
CVE-2026-58656 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | Grav API plugin before v1.0.0-rc.16 accepts JWT tokens via the ?token= URL query | |
|
77
|
CVE-2026-116872 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vu | |
|
77
|
CVE-2026-117540 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability | |
|
77
|
CVE-2026-73939 |
8.6 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
76
|
CVE-2026-45327 |
8.2 | 0.0036 | NET NO AUTH LOW CX NO UI | TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2. | |
|
76
|
CVE-2026-101758 |
8.2 | 0.0036 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Communications Billing and Revenue Management produc | |
|
76
|
CVE-2026-61586 |
8.2 | 0.0036 | NET NO AUTH LOW CX NO UI | Copernik XML Factory provides secure-by-default JAXP factory creation for Java. | |
|
76
|
CVE-2026-4256 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | Improper neutralization of special elements used in an LDAP query ('LDAP injecti | |
|
76
|
CVE-2026-48771 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form sub | |
|
75
|
CVE-2026-49217 |
7.5 | 0.0036 | NET NO AUTH LOW CX NO UI | Mailu is a mail server as a set of Docker images. Prior to version 2024.06.52, a | |
|
75
|
CVE-2026-47261 |
7.5 | 0.0036 | NET NO AUTH LOW CX NO UI | Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and | |
|
75
|
CVE-2026-90869 |
7.5 | 0.0036 | NET NO AUTH LOW CX NO UI | A remote attacker who knows a valid account's enrolled SSH public key can termin | |
|
75
|
CVE-2025-66020 |
7.5 | 0.0036 | NET NO AUTH LOW CX NO UI | Valibot helps validate data using a schema. In versions from 0.31.0 to 1.1.0, th | |
|
75
|
CVE-2026-107042 |
7.5 | 0.0036 | NET NO AUTH LOW CX NO UI | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 a | |
|
75
|
CVE-2026-8700 |
7.3 | 0.0036 | NET NO AUTH LOW CX NO UI | Crypt::DSA versions before 1.20 for Perl generate seeds using rand. Seeds were | |
|
75
|
CVE-2026-43891 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | changedetection.io is a free open source web page change detection tool. Prior t | |
|
75
|
CVE-2026-35269 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Identity Manager product of Oracle Fusion Middleware (compo | |
|
75
|
CVE-2026-60593 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office product of | |
|
75
|
CVE-2026-71023 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-73879 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73903 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-107052 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead v | |
|
74
|
CVE-2026-6653 |
7.0 | 0.0036 | NET NO AUTH LOW CX NO UI | Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2. | |
|
69
|
CVE-2026-118321 |
9.6 | 0.0035 | NET NO AUTH LOW CX | Improper input validation in Core in Google Chrome on on Android prior to 156.0. | |
|
69
|
CVE-2026-118340 |
9.6 | 0.0035 | NET NO AUTH LOW CX | Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remo | |
|
68
|
CVE-2026-16496 |
8.9 | 0.0036 | NET NO AUTH NO UI | The terraform-mcp-server before version 1.1.0 is vulnerable to an authorization | |
|
68
|
CVE-2026-113030 |
8.8 | 0.0035 | NET NO AUTH LOW CX | Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a | |
|
67
|
CVE-2026-61875 |
8.7 | 0.0036 | NET NO AUTH LOW CX | luci-app-upnp contains a stored cross-site scripting vulnerability that allows u | |
|
67
|
CVE-2026-60860 |
8.7 | 0.0036 | NET NO AUTH NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
66
|
CVE-2026-46898 |
8.1 | 0.0036 | NET NO AUTH LOW CX | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
65
|
CVE-2026-60667 |
7.4 | 0.0036 | NET NO AUTH NO UI | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle | |
|
64
|
CVE-2026-53789 |
7.1 | 0.0036 | NET NO AUTH LOW CX | rsync before 3.5.0 contains an improper path handling vulnerability that allows | |
|
64
|
CVE-2026-41653 |
7.0 | 0.0036 | NET NO AUTH LOW CX | BentoPDF is a client-side PDF toolkit that is self hostable. Prior to version 2. | |
|
64
|
CVE-2026-42012 |
7.1 | 0.0035 | NET NO AUTH LOW CX | A flaw was found in gnutls. A remote attacker could exploit this vulnerability b | |
|
57
|
CVE-2026-6442 |
8.3 | 0.0036 | NET NO AUTH | Improper validation of bash commands in Snowflake Cortex Code CLI versions prior | |
|
55
|
CVE-2026-13968 |
7.5 | 0.0036 | NET NO AUTH | Insufficient validation of untrusted input in DevTools in Google Chrome prior to |