Hunt List
13,782 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-46778 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
80
|
CVE-2026-46781 |
10.0 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
80
|
CVE-2026-35309 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-46766 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-46799 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
80
|
CVE-2026-46813 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
80
|
CVE-2026-46860 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: Ge | |
|
80
|
CVE-2026-46881 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46882 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46883 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-46902 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
80
|
CVE-2026-46904 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
80
|
CVE-2026-91214 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91233 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91234 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91235 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-91236 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo | |
|
80
|
CVE-2026-86384 |
9.8 | 0.0047 | NET NO AUTH LOW CX NO UI | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS | |
|
79
|
CVE-2026-32661 |
9.3 | 0.0047 | NET NO AUTH LOW CX NO UI | Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and G | |
|
78
|
CVE-2026-89293 |
8.8 | 0.0047 | NET NO AUTH LOW CX NO UI | In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was po | |
|
78
|
CVE-2026-44126 |
9.2 | 0.0047 | NET NO AUTH LOW CX NO UI | SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untr | |
|
77
|
CVE-2026-56238 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | Capgo before 12.128.2 contains an information disclosure vulnerability in the Su | |
|
77
|
CVE-2026-114141 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml | |
|
77
|
CVE-2026-114143 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.par | |
|
77
|
CVE-2026-55768 |
8.7 | 0.0047 | NET NO AUTH LOW CX NO UI | GoAccess is a real-time web log analyzer and interactive viewer that runs in a t | |
|
75
|
CVE-2026-10852 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty ar | |
|
75
|
CVE-2026-44025 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Fluentd collects events from various data sources and writes them to files, RDBM | |
|
75
|
CVE-2026-101679 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon | |
|
75
|
CVE-2026-115721 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vys | |
|
75
|
CVE-2026-58011 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the | |
|
75
|
CVE-2026-44974 |
7.7 | 0.0047 | NET NO AUTH LOW CX NO UI | @hapi/content provided HTTP Content-* headers parsing. Prior to 6.0.2, Content.d | |
|
75
|
CVE-2026-11806 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected | |
|
75
|
CVE-2026-48812 |
7.5 | 0.0047 | NET NO AUTH LOW CX NO UI | FreeScout is a free help desk and shared inbox built with PHP's Laravel framewor | |
|
74
|
CVE-2026-0264 |
7.2 | 0.0047 | NET NO AUTH LOW CX NO UI | A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo | |
|
69
|
CVE-2026-46856 |
9.6 | 0.0047 | NET NO AUTH LOW CX | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
69
|
CVE-2026-59891 |
9.6 | 0.0047 | NET NO AUTH LOW CX | sigstore-js provides JavaScript libraries for interacting with Sigstore services | |
|
68
|
CVE-2026-50191 |
8.8 | 0.0047 | NET NO AUTH LOW CX | 4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4g | |
|
68
|
CVE-2026-115895 |
8.8 | 0.0047 | NET NO AUTH LOW CX | Happy DOM is a JavaScript implementation of a web browser without its graphical | |
|
68
|
CVE-2026-41269 |
8.8 | 0.0047 | NET LOW CX NO UI | Flowise is a drag & drop user interface to build a customized large language mod | |
|
68
|
CVE-2026-33318 |
8.8 | 0.0047 | NET LOW CX NO UI | Actual is a local-first personal finance tool. Prior to version 26.4.0, any auth | |
|
67
|
CVE-2026-71965 |
8.7 | 0.0047 | NET LOW CX NO UI | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code | |
|
67
|
CVE-2026-71473 |
8.5 | 0.0047 | NET LOW CX NO UI | A flaw was found in the `search-v2-operator` component. A user with specific adm | |
|
67
|
CVE-2026-112343 |
8.6 | 0.0047 | NET LOW CX NO UI | Syncplify Server! before 8.8.0 contains an access control bypass vulnerability t | |
|
66
|
CVE-2026-62418 |
8.1 | 0.0047 | NET LOW CX NO UI | Low-privileged authenticated Server-Side Request Forgery (SSRF) vulnerability i | |
|
66
|
CVE-2026-57818 |
8.1 | 0.0047 | NET NO AUTH NO UI | A race condition in JCacheCodeDataProvider allows an attacker to redeem a single | |
|
65
|
CVE-2026-59931 |
7.7 | 0.0047 | NET LOW CX NO UI | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. | |
|
65
|
CVE-2026-50237 |
7.4 | 0.0047 | NET LOW CX NO UI | A Server-Side Request Forgery and supply chain flaw was found in the OpenShift C | |
|
64
|
CVE-2026-72909 |
7.1 | 0.0047 | NET LOW CX NO UI | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15 | |
|
61
|
CVE-2026-41424 |
8.2 | 0.0047 | NET LOW CX NO UI | Wazuh is a free and open source platform used for threat prevention, detection, | |
|
57
|
CVE-2026-92982 |
8.5 | 0.0047 | NET NO UI | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user c |