Hunt List
8,552 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-45060 |
9.8 | 0.0044 | NET NO AUTH LOW CX NO UI | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - | |
|
80
|
CVE-2026-47396 |
9.8 | 0.0043 | NET NO AUTH LOW CX NO UI | PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's ca | |
|
78
|
CVE-2026-24611 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. | |
|
78
|
CVE-2026-12694 |
9.1 | 0.0044 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform a | |
|
78
|
CVE-2026-65889 |
9.2 | 0.0044 | NET NO AUTH LOW CX NO UI | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < | |
|
78
|
CVE-2026-0647 |
8.8 | 0.0043 | NET NO AUTH LOW CX NO UI | An improper authentication security issue exists within the 1794-AENTR adapter's | |
|
77
|
CVE-2026-44593 |
8.7 | 0.0044 | NET NO AUTH LOW CX NO UI | esm.sh is a no-build content delivery network (CDN) for web development. In 137 | |
|
77
|
CVE-2026-60293 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-60431 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com | |
|
77
|
CVE-2026-60556 |
8.6 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-65759 |
8.7 | 0.0043 | NET NO AUTH LOW CX NO UI | Joomla Extension - joomshaper.com - unauthenticated payment/order forgery in Eas | |
|
75
|
CVE-2026-28925 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | A buffer overflow was addressed with improved bounds checking. This issue is fix | |
|
75
|
CVE-2026-42582 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Netty is an asynchronous, event-driven network application framework. Prior to 4 | |
|
75
|
CVE-2026-57231 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Podman is a tool for managing OCI containers and pods. From 1.8.1 until 5.8.4, a | |
|
75
|
CVE-2026-60167 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beve | |
|
75
|
CVE-2026-60554 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
75
|
CVE-2026-61116 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Application Object Library product of Oracle E-Busin | |
|
75
|
CVE-2026-61133 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon | |
|
75
|
CVE-2026-61159 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
75
|
CVE-2026-60393 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
75
|
CVE-2026-73878 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73883 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-73884 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
75
|
CVE-2026-3902 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4 | |
|
75
|
CVE-2026-7040 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow | |
|
75
|
CVE-2026-72692 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | A missing authorization vulnerability in OpenSignLabs opensignserver through 2.3 | |
|
75
|
CVE-2026-73249 |
7.5 | 0.0044 | NET NO AUTH LOW CX NO UI | calibre is an e-book manager. Prior to 9.12.0, the calibre Content Server endpoi | |
|
75
|
CVE-2026-60223 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
75
|
CVE-2026-70700 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Payables product of Oracle E-Business Suite (compone | |
|
75
|
CVE-2026-71113 |
7.5 | 0.0043 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp | |
|
69
|
CVE-2026-17718 |
9.6 | 0.0044 | NET NO AUTH LOW CX | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote | |
|
69
|
CVE-2026-17721 |
9.6 | 0.0044 | NET NO AUTH LOW CX | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a r | |
|
69
|
CVE-2026-52703 |
9.6 | 0.0044 | NET NO AUTH LOW CX | Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. | |
|
69
|
CVE-2026-34660 |
9.3 | 0.0044 | NET NO AUTH LOW CX | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by an Inco | |
|
69
|
CVE-2026-39878 |
9.3 | 0.0043 | NET NO AUTH LOW CX | Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting v | |
|
68
|
CVE-2026-14407 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allow | |
|
68
|
CVE-2026-16362 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixe | |
|
68
|
CVE-2026-17922 |
8.8 | 0.0044 | NET NO AUTH LOW CX | Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922. | |
|
68
|
CVE-2026-5279 |
8.8 | 0.0043 | NET NO AUTH LOW CX | Object corruption in V8 in Google Chrome prior to 146.0.7680.178 allowed a remot | |
|
67
|
CVE-2026-35554 |
8.7 | 0.0044 | NET NO AUTH NO UI | A race condition in the Apache Kafka Java producer client’s buffer pool manageme | |
|
67
|
CVE-2026-58077 |
8.7 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 | |
|
67
|
CVE-2026-58148 |
8.7 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Jo | |
|
67
|
CVE-2026-57833 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 | |
|
67
|
CVE-2026-50190 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerab | |
|
67
|
CVE-2026-76612 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled | |
|
67
|
CVE-2026-77027 |
8.6 | 0.0044 | NET NO AUTH LOW CX | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - | |
|
66
|
CVE-2026-101770 |
8.1 | 0.0044 | NET NO AUTH NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
66
|
CVE-2026-56031 |
8.1 | 0.0044 | NET NO AUTH NO UI | Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions. | |
|
64
|
CVE-2026-75531 |
7.0 | 0.0044 | NET NO AUTH LOW CX | Pandora contains a stored cross-site scripting (XSS) vulnerability in the render | |
|
55
|
CVE-2026-62765 |
7.5 | 0.0044 | NET NO AUTH | Access of resource using incompatible type ('type confusion') in Microsoft Edge |