Hunt List
12,861 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2024-34320 |
9.8 | 0.0035 | NET NO AUTH LOW CX NO UI | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect acces | |
|
79
|
CVE-2026-11849 |
9.3 | 0.0035 | NET NO AUTH LOW CX NO UI | The iRM-IEI Remote Management developed by IEI Integration Corp has a Hardcoded | |
|
77
|
CVE-2026-44499 |
8.7 | 0.0035 | NET NO AUTH LOW CX NO UI | ZEBRA is a Zcash node written entirely in Rust. Prior to version 4.4.0, a compos | |
|
76
|
CVE-2026-35227 |
8.2 | 0.0035 | NET NO AUTH LOW CX NO UI | An unauthenticated remote attacker may exhaust all available TCP connections in | |
|
75
|
CVE-2026-34063 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Nimiq's network-libp2p is a Nimiq network implementation based on libp2p. Prior | |
|
75
|
CVE-2026-10638 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that pac | |
|
75
|
CVE-2026-54719 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | goshs is a feature-rich single-binary file server for red teamers and developers | |
|
75
|
CVE-2026-42855 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ES | |
|
75
|
CVE-2026-42551 |
7.5 | 0.0035 | NET NO AUTH LOW CX NO UI | Flight is an extensible micro-framework for PHP. Prior to 3.18.1, Request::getMe | |
|
69
|
CVE-2026-10140 |
9.6 | 0.0035 | NET LOW CX NO UI | IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state | |
|
69
|
CVE-2026-18972 |
9.6 | 0.0035 | NET LOW CX NO UI | An authenticated attacker can spoof another GUI user's identity by sending their | |
|
68
|
CVE-2026-53593 |
8.8 | 0.0035 | NET LOW CX NO UI | FreeScout is a free help desk and shared inbox built with PHP's Laravel framewor | |
|
68
|
CVE-2026-76300 |
8.8 | 0.0035 | NET LOW CX NO UI | As part of Cisco's ongoing commitment to proactive security and product quality, | |
|
67
|
CVE-2026-4026 |
8.7 | 0.0035 | NET LOW CX NO UI | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 th | |
|
67
|
CVE-2026-12715 |
8.5 | 0.0035 | NET LOW CX NO UI | Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04- | |
|
65
|
CVE-2026-60750 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen | |
|
65
|
CVE-2026-60824 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (compone | |
|
65
|
CVE-2026-61142 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen | |
|
65
|
CVE-2026-62560 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (co | |
|
65
|
CVE-2026-62567 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (compon | |
|
65
|
CVE-2026-60969 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
65
|
CVE-2026-60983 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
65
|
CVE-2026-61199 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
65
|
CVE-2026-61331 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Financials Common Modules product of Oracle E-Busine | |
|
65
|
CVE-2026-62467 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
65
|
CVE-2026-62571 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyper | |
|
65
|
CVE-2026-62593 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
65
|
CVE-2026-70687 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (compon | |
|
65
|
CVE-2026-70692 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Bu | |
|
65
|
CVE-2026-70771 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Warehouse Management product of Oracle E-Business Su | |
|
65
|
CVE-2026-70827 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Bu | |
|
65
|
CVE-2026-70828 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
65
|
CVE-2026-70942 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype | |
|
65
|
CVE-2026-70945 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen | |
|
65
|
CVE-2026-70988 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
65
|
CVE-2026-71056 |
7.7 | 0.0035 | NET LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
65
|
CVE-2026-84294 |
7.7 | 0.0035 | NET LOW CX NO UI | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Sof | |
|
65
|
CVE-2024-7956 |
7.6 | 0.0035 | NET LOW CX NO UI | A vulnerability exists in the affected products that allows a threat actor to ga | |
|
64
|
CVE-2026-75846 |
7.1 | 0.0035 | NET LOW CX NO UI | ArcadeDB before 26.8.1 (affected versions <= 26.7.3) contains a missing authoriz | |
|
64
|
CVE-2026-115191 |
7.1 | 0.0035 | NET LOW CX NO UI | A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Ma | |
|
64
|
CVE-2026-115192 |
7.1 | 0.0035 | NET LOW CX NO UI | An SQL Injection vulnerability exists in the dashboard widget data API endpoint | |
|
64
|
CVE-2026-57217 |
7.0 | 0.0035 | NET LOW CX NO UI | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.21, 4.1.11, | |
|
64
|
CVE-2026-4027 |
7.1 | 0.0035 | NET LOW CX NO UI | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 an | |
|
64
|
CVE-2026-48495 |
7.1 | 0.0035 | NET LOW CX NO UI | TypeBot is a chatbot builder tool. Prior to version 3.17.0, the Google Sheets OA | |
|
59
|
CVE-2026-44855 |
7.2 | 0.0035 | NET LOW CX NO UI | Stack-based buffer overflow vulnerabilities exist in several underlying manageme | |
|
59
|
CVE-2026-44856 |
7.2 | 0.0035 | NET LOW CX NO UI | Stack-based buffer overflow vulnerabilities exist in several underlying manageme | |
|
59
|
CVE-2026-44857 |
7.2 | 0.0035 | NET LOW CX NO UI | Stack-based buffer overflow vulnerabilities exist in several underlying manageme | |
|
59
|
CVE-2026-44858 |
7.2 | 0.0035 | NET LOW CX NO UI | Stack-based buffer overflow vulnerabilities exist in several underlying manageme | |
|
55
|
CVE-2026-53950 |
7.5 | 0.0035 | NET NO AUTH | @tryghost/activitypub is Ghost’s social/federation client app. Prior to 3.1.0, t | |
|
45
|
CVE-2026-33544 |
7.7 | 0.0035 | NET | Tinyauth is an authentication and authorization server. Prior to version 5.0.5, |