Hunt List
8,594 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-47056 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60217 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60358 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
80
|
CVE-2026-60360 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-60379 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-60389 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-60644 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-61241 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa | |
|
80
|
CVE-2026-70880 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora | |
|
80
|
CVE-2026-91216 |
10.0 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46857 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
80
|
CVE-2026-46859 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: | |
|
80
|
CVE-2026-35290 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46876 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46924 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in Oracle Application Testing Suite. The supported version that | |
|
80
|
CVE-2026-46982 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl | |
|
80
|
CVE-2026-46983 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Appl | |
|
80
|
CVE-2026-46994 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
80
|
CVE-2026-47036 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon | |
|
80
|
CVE-2026-60173 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: | |
|
80
|
CVE-2026-60197 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60198 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60199 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60200 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60202 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60204 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60205 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-60209 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60210 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60212 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60215 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60216 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60219 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60221 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60224 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60225 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60226 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-60227 |
9.8 | 0.0051 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
78
|
CVE-2026-7821 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0. | |
|
78
|
CVE-2026-55954 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple all | |
|
78
|
CVE-2026-64392 |
9.1 | 0.0051 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: use | |
|
78
|
CVE-2026-67183 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | TinyWeb through 0.0.8 contains a memory leak vulnerability that allows unauthent | |
|
78
|
CVE-2026-74892 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in | |
|
78
|
CVE-2026-118689 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in Ovt | |
|
78
|
CVE-2025-34457 |
8.7 | 0.0051 | NET NO AUTH LOW CX NO UI | wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit | |
|
77
|
CVE-2026-17485 |
8.2 | 0.0051 | NET NO AUTH LOW CX NO UI | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of | |
|
75
|
CVE-2026-34020 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | Use of GET Request Method With Sensitive Query Strings vulnerability in Apache O | |
|
75
|
CVE-2026-107630 |
7.5 | 0.0051 | NET NO AUTH LOW CX NO UI | The Email Templates Customizer and Designer for WordPress and WooCommerce plugin | |
|
68
|
CVE-2026-5287 |
8.8 | 0.0051 | NET NO AUTH LOW CX | Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote | |
|
68
|
CVE-2026-109428 |
8.7 | 0.0051 | NET NO AUTH LOW CX | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability |