Hunt List
13,143 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
79
|
CVE-2026-103594 |
9.5 | 0.0043 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configura | |
|
79
|
CVE-2026-45010 |
9.3 | 0.0043 | NET NO AUTH LOW CX NO UI | phpMyFAQ before 4.1.2 contains an improper restriction of excessive authenticati | |
|
78
|
CVE-2026-72804 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph | |
|
78
|
CVE-2026-116014 |
9.2 | 0.0043 | NET NO AUTH LOW CX NO UI | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStr | |
|
70
|
CVE-2026-60429 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
70
|
CVE-2026-60445 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60447 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60456 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60457 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60458 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60459 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60461 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60524 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-60531 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
70
|
CVE-2026-60537 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl | |
|
70
|
CVE-2026-60542 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Business Process Management Suite product of Oracle | |
|
70
|
CVE-2026-60547 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl | |
|
70
|
CVE-2026-60552 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60561 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60562 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60565 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60568 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60627 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards | |
|
70
|
CVE-2026-60663 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
70
|
CVE-2026-60711 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
70
|
CVE-2026-61041 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply | |
|
70
|
CVE-2026-61072 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil prod | |
|
70
|
CVE-2026-61076 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager produc | |
|
70
|
CVE-2026-61146 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
70
|
CVE-2026-61209 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle Pe | |
|
70
|
CVE-2026-61211 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the RDBMS component of Oracle Database Server. Supported versi | |
|
70
|
CVE-2026-61242 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product | |
|
70
|
CVE-2026-60702 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60720 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60730 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-60990 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
70
|
CVE-2026-60995 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
70
|
CVE-2026-61003 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl | |
|
70
|
CVE-2026-61021 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-61066 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-61206 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyper | |
|
70
|
CVE-2026-61248 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa | |
|
70
|
CVE-2026-61317 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
70
|
CVE-2026-62512 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
70
|
CVE-2026-62588 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
70
|
CVE-2026-62608 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
70
|
CVE-2026-70920 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
70
|
CVE-2026-71059 |
9.9 | 0.0043 | NET LOW CX NO UI | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: | |
|
69
|
CVE-2026-12605 |
9.6 | 0.0043 | NET NO AUTH LOW CX | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet | |
|
69
|
CVE-2026-42811 |
9.4 | 0.0043 | NET LOW CX NO UI | In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials |