Hunt List
12,979 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-8363 |
9.8 | 0.0040 | NET NO AUTH LOW CX NO UI | A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when p | |
|
77
|
CVE-2025-34179 |
8.7 | 0.0040 | NET NO AUTH LOW CX NO UI | NetSupport Manager < 14.12.0001 contains an unauthenticated SQL injection vulner | |
|
77
|
CVE-2026-114088 |
8.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in th | |
|
77
|
CVE-2026-112775 |
8.7 | 0.0040 | NET NO AUTH LOW CX NO UI | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerabili | |
|
76
|
CVE-2026-73937 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
76
|
CVE-2026-87394 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl | |
|
75
|
CVE-2026-23826 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | A vulnerability in a network management service of AOS-8 Operating System could | |
|
75
|
CVE-2026-62663 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | Banks generates meaningful LLM prompts using a simple template language. In vers | |
|
75
|
CVE-2026-5089 |
7.3 | 0.0040 | NET NO AUTH LOW CX NO UI | YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 | |
|
75
|
CVE-2025-63561 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is suscept | |
|
75
|
CVE-2026-33662 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-s | |
|
75
|
CVE-2026-48615 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | A flaw in Node.js proxy tunnel error handling could expose proxy credentials in | |
|
70
|
CVE-2026-46852 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E | |
|
70
|
CVE-2026-35282 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-46765 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46767 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46779 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-46782 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio | |
|
70
|
CVE-2026-46792 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middlew | |
|
70
|
CVE-2026-46793 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Identity Manager Connector product of Oracle Fusion Middlew | |
|
70
|
CVE-2026-46802 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46814 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46844 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
70
|
CVE-2026-46900 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
70
|
CVE-2026-46963 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Su | |
|
70
|
CVE-2026-46964 |
9.9 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Su | |
|
69
|
CVE-2026-39902 |
7.2 | 0.0040 | NET LOW CX NO UI | 1 PoC | Cacti is an open source performance and fault management framework. Prior to ver |
|
68
|
CVE-2026-113205 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113208 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allow | |
|
68
|
CVE-2026-113216 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a r | |
|
68
|
CVE-2026-113218 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113219 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a | |
|
68
|
CVE-2026-113251 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote a | |
|
68
|
CVE-2026-48170 |
9.1 | 0.0040 | NET LOW CX NO UI | `scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 performs p | |
|
68
|
CVE-2026-46885 |
8.8 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
68
|
CVE-2026-46921 |
8.8 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
68
|
CVE-2026-35318 |
8.8 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-35324 |
8.8 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
68
|
CVE-2026-46780 |
8.8 | 0.0040 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
66
|
CVE-2026-116238 |
8.1 | 0.0040 | NET NO AUTH NO UI | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS fail | |
|
66
|
CVE-2026-33980 |
8.1 | 0.0040 | NET LOW CX NO UI | Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that ena | |
|
66
|
CVE-2026-90867 |
8.1 | 0.0040 | NET NO AUTH NO UI | Improper access control in the Web Admin console of Progress Software WS_FTP Ser | |
|
65
|
CVE-2026-49279 |
7.7 | 0.0040 | NET LOW CX NO UI | WWBN AVideo is an open source video platform. Versions 29.0 and below contain a | |
|
65
|
CVE-2026-64636 |
7.7 | 0.0040 | NET LOW CX NO UI | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Win | |
|
64
|
CVE-2026-47147 |
7.1 | 0.0040 | NET LOW CX NO UI | In EmberZNet v9.0.2 and earlier, malformed OTA requests can drive the OTA server | |
|
64
|
CVE-2026-114043 |
7.1 | 0.0040 | NET NO AUTH LOW CX | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipbo | |
|
64
|
CVE-2026-50163 |
7.1 | 0.0040 | NET NO AUTH LOW CX | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPa | |
|
64
|
CVE-2026-56223 |
9.3 | 0.0040 | NET LOW CX NO UI | Capgo before 12.128.2 contains a cross-domain SSO account takeover vulnerability | |
|
62
|
CVE-2026-41937 |
8.6 | 0.0040 | NET LOW CX NO UI | Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the p | |
|
58
|
CVE-2026-55570 |
9.0 | 0.0040 | NET LOW CX | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, i |