Hunt List
12,829 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-35157 |
9.8 | 0.0032 | NET NO AUTH LOW CX NO UI | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to | |
|
78
|
CVE-2026-116165 |
8.8 | 0.0032 | NET NO AUTH LOW CX NO UI | Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing a | |
|
78
|
CVE-2026-75595 |
9.1 | 0.0032 | NET NO AUTH LOW CX NO UI | Netty is an asynchronous, event-driven network application framework. Prior to 4 | |
|
76
|
CVE-2026-48617 |
8.2 | 0.0032 | NET NO AUTH LOW CX NO UI | A flaw in Node.js Permission Model enforcement allows Bypass via `process.report | |
|
76
|
CVE-2026-28525 |
8.2 | 0.0032 | NET NO AUTH LOW CX NO UI | SWUpdate contains an integer underflow vulnerability in the multipart upload par | |
|
76
|
CVE-2026-46509 |
8.2 | 0.0032 | NET NO AUTH LOW CX NO UI | deepobj provides get, set, delete deep objects in javascript. Prior to 1.0.3, pr | |
|
76
|
CVE-2026-35142 |
8.2 | 0.0032 | NET NO AUTH LOW CX NO UI | HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. | |
|
75
|
CVE-2026-112359 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows | |
|
75
|
CVE-2026-116393 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in iHomefinder, Inc. Optima Express optima-e | |
|
75
|
CVE-2026-114193 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp | |
|
75
|
CVE-2026-115599 |
7.5 | 0.0032 | NET NO AUTH LOW CX NO UI | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Ex | |
|
74
|
CVE-2026-8141 |
7.2 | 0.0032 | NET NO AUTH LOW CX NO UI | The Ajax Load More - Filters plugin for WordPress is vulnerable to Stored Cross- | |
|
74
|
CVE-2026-75091 |
7.2 | 0.0032 | NET NO AUTH LOW CX NO UI | The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for | |
|
69
|
CVE-2026-45323 |
9.6 | 0.0032 | NET NO AUTH LOW CX | MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3 | |
|
68
|
CVE-2026-11751 |
9.1 | 0.0032 | NET NO AUTH NO UI | A vulnerability has been identified in armeria-xds versions prior to 1.41.0, whe | |
|
68
|
CVE-2026-113143 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a rem | |
|
68
|
CVE-2026-118317 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remo | |
|
68
|
CVE-2026-118320 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote | |
|
68
|
CVE-2026-118336 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 al | |
|
68
|
CVE-2026-118339 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a re | |
|
68
|
CVE-2025-13014 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Use-after-free in the Audio/Video component. This vulnerability was fixed in Fir | |
|
68
|
CVE-2026-42629 |
8.8 | 0.0032 | NET NO AUTH LOW CX | Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 v | |
|
68
|
CVE-2026-91563 |
8.8 | 0.0032 | NET LOW CX NO UI | Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported | |
|
67
|
CVE-2026-116068 |
8.7 | 0.0032 | NET LOW CX NO UI | Dokploy through 0.30.10 contains an authorization bypass vulnerability that allo | |
|
67
|
CVE-2026-39974 |
8.5 | 0.0032 | NET LOW CX NO UI | n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants wit | |
|
66
|
CVE-2026-15078 |
8.1 | 0.0032 | NET LOW CX NO UI | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker | |
|
66
|
CVE-2025-61560 |
8.1 | 0.0032 | NET NO AUTH NO UI | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Compu | |
|
66
|
CVE-2026-60944 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
66
|
CVE-2026-61222 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware | |
|
66
|
CVE-2026-61340 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Bu | |
|
66
|
CVE-2026-62448 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (com | |
|
66
|
CVE-2026-62485 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle | |
|
66
|
CVE-2026-62605 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit | |
|
66
|
CVE-2026-71016 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
66
|
CVE-2026-71018 |
8.2 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
66
|
CVE-2026-27333 |
8.1 | 0.0032 | NET NO AUTH NO UI | Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site | |
|
66
|
CVE-2026-71308 |
8.1 | 0.0032 | NET LOW CX NO UI | Lemur manages TLS certificate creation. From 0.5.0 until 1.9.3, certificate crea | |
|
65
|
CVE-2026-40188 |
7.7 | 0.0032 | NET LOW CX NO UI | goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, th | |
|
65
|
CVE-2026-91661 |
7.7 | 0.0032 | NET LOW CX NO UI | Vulnerability in Oracle Essbase (component: Security). The supported version t | |
|
65
|
CVE-2026-83367 |
7.4 | 0.0032 | NET NO AUTH NO UI | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit | |
|
65
|
CVE-2026-91494 |
7.4 | 0.0032 | NET NO AUTH NO UI | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion | |
|
65
|
CVE-2026-62518 |
7.6 | 0.0032 | NET LOW CX NO UI | Vulnerability in the Oracle Production Scheduling product of Oracle E-Business S | |
|
65
|
CVE-2026-70803 |
7.6 | 0.0032 | NET LOW CX NO UI | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c | |
|
64
|
CVE-2026-69117 |
7.1 | 0.0032 | NET LOW CX NO UI | NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated a | |
|
64
|
CVE-2026-61288 |
7.1 | 0.0032 | NET NO AUTH LOW CX | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
63
|
CVE-2026-41258 |
9.1 | 0.0032 | NET LOW CX NO UI | OpenMRS is an open source electronic medical record system platform. From 2.7.0 | |
|
63
|
CVE-2026-91241 |
9.1 | 0.0032 | NET LOW CX NO UI | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of | |
|
59
|
CVE-2026-97164 |
7.0 | 0.0032 | NET LOW CX NO UI | Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `cle | |
|
57
|
CVE-2026-116797 |
8.5 | 0.0032 | NET LOW CX | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3. | |
|
46
|
CVE-2026-49091 |
8.0 | 0.0032 | NET | Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log inje |