Hunt List
8,662 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-10879 |
9.8 | 0.0049 | NET NO AUTH LOW CX NO UI | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL stat | |
|
80
|
CVE-2026-35292 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
80
|
CVE-2026-35301 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (compon | |
|
80
|
CVE-2026-46798 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46800 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-64812 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possib | |
|
80
|
CVE-2026-91231 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91221 |
10.0 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-35286 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-35293 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-35296 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-35310 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-35319 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-46783 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
80
|
CVE-2026-46797 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46801 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46878 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46879 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46880 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46890 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo | |
|
80
|
CVE-2026-46905 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46909 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-47846 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Bitnami Cassandra container images are affected by a retained default superuser | |
|
80
|
CVE-2026-56030 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions. | |
|
80
|
CVE-2026-56033 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions. | |
|
80
|
CVE-2026-57813 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailopt | |
|
80
|
CVE-2026-64873 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custo | |
|
80
|
CVE-2026-59540 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 v | |
|
80
|
CVE-2026-61951 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions. | |
|
80
|
CVE-2026-16504 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Deployment of the VPS.org one-click Zulip template deploys a hardcoded applicati | |
|
80
|
CVE-2026-71214 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-serve | |
|
80
|
CVE-2026-28005 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1. | |
|
80
|
CVE-2026-65507 |
9.8 | 0.0048 | NET NO AUTH LOW CX NO UI | Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions. | |
|
79
|
CVE-2026-40044 |
9.3 | 0.0048 | NET NO AUTH LOW CX NO UI | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticate | |
|
79
|
CVE-2026-110475 |
9.3 | 0.0048 | NET NO AUTH LOW CX NO UI | This vulnerability exists in the CreditNirvana Collections Platform due to impro | |
|
78
|
CVE-2026-10560 |
9.1 | 0.0048 | NET NO AUTH LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.9.6 contains a missing authentication vulnerabi | |
|
77
|
CVE-2026-33689 |
8.7 | 0.0048 | NET NO AUTH LOW CX NO UI | xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds | |
|
77
|
CVE-2026-55204 |
8.7 | 0.0048 | NET NO AUTH LOW CX NO UI | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer derefer | |
|
76
|
CVE-2026-43893 |
8.2 | 0.0049 | NET NO AUTH LOW CX NO UI | exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 3 | |
|
76
|
CVE-2026-64389 |
8.2 | 0.0049 | NET NO AUTH LOW CX NO UI | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vali | |
|
75
|
CVE-2026-110676 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encodi | |
|
75
|
CVE-2026-110672 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object | |
|
75
|
CVE-2026-110673 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested | |
|
75
|
CVE-2026-71241 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Book-Management-System's Flask API endpoints /student, /record, /books, /find_st | |
|
75
|
CVE-2026-52021 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacke | |
|
75
|
CVE-2026-110677 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecti | |
|
75
|
CVE-2026-110688 |
7.5 | 0.0049 | NET NO AUTH LOW CX NO UI | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use | |
|
75
|
CVE-2023-30367 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software tha | |
|
75
|
CVE-2026-5438 |
7.5 | 0.0048 | NET NO AUTH LOW CX NO UI | A gzip decompression bomb vulnerability exists when Orthanc processes HTTP reque | |
|
66
|
CVE-2026-56428 |
8.1 | 0.0048 | NET NO AUTH NO UI | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-spe |