Hunt List
13,093 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
79
|
CVE-2026-61186 |
9.4 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle | |
|
79
|
CVE-2026-62629 |
9.4 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middlewar | |
|
78
|
CVE-2026-59702 |
9.2 | 0.0041 | NET NO AUTH LOW CX NO UI | repomix contains a server-side request forgery vulnerability in the POST /api/pa | |
|
78
|
CVE-2021-48012 |
8.8 | 0.0041 | NET NO AUTH LOW CX NO UI | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows | |
|
77
|
CVE-2026-110938 |
8.7 | 0.0042 | NET NO AUTH LOW CX NO UI | In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable t | |
|
77
|
CVE-2026-112200 |
8.7 | 0.0041 | NET NO AUTH LOW CX NO UI | P-Net before 1.0.3 does not release the Application Relationship (AR) and the RP | |
|
77
|
CVE-2026-60327 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-60356 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-60359 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
77
|
CVE-2026-60536 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
77
|
CVE-2026-60550 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-60559 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware ( | |
|
77
|
CVE-2026-60699 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-61228 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
77
|
CVE-2026-61230 |
8.6 | 0.0041 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
76
|
CVE-2026-34578 |
8.2 | 0.0042 | NET NO AUTH LOW CX NO UI | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.6, OPNs | |
|
75
|
CVE-2026-66462 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 ver | |
|
75
|
CVE-2026-66463 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions. | |
|
75
|
CVE-2026-32468 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 ver | |
|
75
|
CVE-2026-66585 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions. | |
|
75
|
CVE-2026-91608 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: | |
|
75
|
CVE-2026-108086 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity referen | |
|
75
|
CVE-2025-4416 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Eve | |
|
75
|
CVE-2024-51316 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the | |
|
75
|
CVE-2026-119187 |
7.5 | 0.0042 | NET NO AUTH LOW CX NO UI | Forge (also called node-forge) is a native implementation of Transport Layer Sec | |
|
69
|
CVE-2026-8152 |
9.3 | 0.0041 | NET NO AUTH LOW CX | Unblu Spark contains an open redirect vulnerability that can be escalated to a D | |
|
68
|
CVE-2026-25039 |
8.8 | 0.0042 | NET LOW CX NO UI | Parsec is a cloud-based application for simple and cryptographically secure file | |
|
68
|
CVE-2026-16379 |
8.8 | 0.0042 | NET NO AUTH LOW CX | Privilege escalation in the DOM: Content Processes component. This vulnerability | |
|
68
|
CVE-2026-58255 |
8.8 | 0.0042 | NET LOW CX NO UI | Cronicle is a multi-server task scheduler and runner, with a web based front-end | |
|
68
|
CVE-2026-85818 |
9.0 | 0.0041 | NET NO AUTH NO UI | Improper verification of cryptographic signature in Windows Schannel allows an u | |
|
68
|
CVE-2026-85634 |
8.8 | 0.0041 | NET LOW CX NO UI | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of th | |
|
67
|
CVE-2026-116009 |
8.7 | 0.0042 | NET LOW CX NO UI | Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows us | |
|
67
|
CVE-2026-59233 |
8.7 | 0.0041 | NET LOW CX NO UI | Missing Authorization in the permission management component in Roskus Prospero | |
|
66
|
CVE-2026-101672 |
8.1 | 0.0042 | NET NO AUTH NO UI | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business | |
|
66
|
CVE-2026-101700 |
8.1 | 0.0042 | NET NO AUTH NO UI | Vulnerability in the Oracle Application Object Library product of Oracle E-Busin | |
|
65
|
CVE-2026-54493 |
7.7 | 0.0042 | NET LOW CX NO UI | Koel is a free, open-source music streaming solution. Prior to 9.7.0, the Subson | |
|
65
|
CVE-2026-10652 |
7.4 | 0.0042 | NET NO AUTH NO UI | Zephyr's DNS resolver (subsys/net/lib/dns) parses resource records from DNS resp | |
|
64
|
CVE-2026-84823 |
7.1 | 0.0042 | NET LOW CX NO UI | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest | |
|
64
|
CVE-2026-63387 |
7.0 | 0.0042 | NET NO AUTH NO UI | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libe | |
|
64
|
CVE-2026-62192 |
7.2 | 0.0042 | NET LOW CX NO UI | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulne | |
|
64
|
CVE-2026-7571 |
7.1 | 0.0042 | NET LOW CX NO UI | A flaw was found in Keycloak. A low-privilege user, with knowledge of user crede | |
|
64
|
CVE-2026-58167 |
7.1 | 0.0042 | NET LOW CX NO UI | Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, in | |
|
64
|
CVE-2026-59098 |
7.1 | 0.0042 | NET LOW CX NO UI | LobeChat through 2.2.9 contains a broken access control vulnerability in the ret | |
|
64
|
CVE-2026-59262 |
7.1 | 0.0042 | NET LOW CX NO UI | AFFiNE's histories GraphQL field fails to validate Doc.Read permission before ex | |
|
64
|
CVE-2026-75480 |
7.1 | 0.0042 | NET LOW CX NO UI | OpenViking debug vector scroll and count endpoints apply only account-level scop | |
|
64
|
CVE-2026-77768 |
7.1 | 0.0042 | NET LOW CX NO UI | The report.get procedure in packages/trpc/src/routers/report.ts accepted only a | |
|
64
|
CVE-2026-77769 |
7.1 | 0.0042 | NET LOW CX NO UI | The report.list procedure in packages/trpc/src/routers/report.ts accepted a proj | |
|
64
|
CVE-2026-110613 |
7.1 | 0.0042 | NET LOW CX NO UI | youlai-mall through commit 9f62de8 contains a missing authorization vulnerabilit | |
|
64
|
CVE-2026-82634 |
7.1 | 0.0042 | NET LOW CX NO UI | Frappe Framework development builds contain an authorization flaw in the render_ | |
|
58
|
CVE-2026-50736 |
9.0 | 0.0041 | NET NO UI | The pglogical queue mechanism, used to convey out-of-band commands such as repli |