Hunt List
12,787 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
79
|
CVE-2026-60002 |
9.4 | 0.0030 | NET NO AUTH LOW CX NO UI | ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its h | |
|
78
|
CVE-2026-22924 |
8.8 | 0.0030 | NET NO AUTH LOW CX NO UI | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). Th | |
|
77
|
CVE-2026-39455 |
8.7 | 0.0030 | NET NO AUTH LOW CX NO UI | When the BIG-IP Configuration utility is configured to use Lightweight Directory | |
|
67
|
CVE-2026-60420 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
67
|
CVE-2026-60426 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middlewar | |
|
67
|
CVE-2026-60444 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar | |
|
67
|
CVE-2026-60452 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
67
|
CVE-2026-62513 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Process Manufacturing Regulatory Management product | |
|
67
|
CVE-2026-60758 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM | |
|
67
|
CVE-2026-60798 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone | |
|
67
|
CVE-2026-61326 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM | |
|
67
|
CVE-2026-62596 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon | |
|
67
|
CVE-2026-70807 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business | |
|
67
|
CVE-2026-71049 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply | |
|
67
|
CVE-2026-71155 |
8.5 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imp | |
|
65
|
CVE-2026-118763 |
7.4 | 0.0030 | NET NO AUTH LOW CX | sigstore-js provides JavaScript libraries for interacting with Sigstore services | |
|
64
|
CVE-2026-60451 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
64
|
CVE-2026-60468 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middlew | |
|
64
|
CVE-2026-60577 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracl | |
|
64
|
CVE-2026-60739 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (co | |
|
64
|
CVE-2026-60774 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Applications Framework product of Oracle E-Business | |
|
64
|
CVE-2026-60799 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business | |
|
64
|
CVE-2026-60800 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business | |
|
64
|
CVE-2026-60870 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite | |
|
64
|
CVE-2026-60908 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (c | |
|
64
|
CVE-2026-61095 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Communications Unified Inventory Management product | |
|
64
|
CVE-2026-61151 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience | |
|
64
|
CVE-2026-61299 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E- | |
|
64
|
CVE-2026-62557 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (compon | |
|
64
|
CVE-2026-62565 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon | |
|
64
|
CVE-2026-60781 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Payments product of Oracle E-Business Suite (compone | |
|
64
|
CVE-2026-62587 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (com | |
|
64
|
CVE-2026-62601 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Sales product of Oracle E-Business Suite (component: | |
|
64
|
CVE-2026-70736 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Hyperion Profitability and Cost Management product o | |
|
64
|
CVE-2026-70801 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suit | |
|
64
|
CVE-2026-70808 |
7.1 | 0.0030 | NET LOW CX NO UI | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (compon | |
|
59
|
CVE-2026-116392 |
7.2 | 0.0030 | NET LOW CX NO UI | Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordi | |
|
59
|
CVE-2026-115590 |
7.2 | 0.0030 | NET LOW CX NO UI | Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allow | |
|
59
|
CVE-2026-116390 |
7.2 | 0.0030 | NET LOW CX NO UI | Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything&n | |
|
59
|
CVE-2026-116864 |
7.2 | 0.0030 | NET LOW CX NO UI | Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. | |
|
59
|
CVE-2026-116865 |
7.2 | 0.0030 | NET LOW CX NO UI | Editor PHP Object Injection in Zippy <= 1.7.0 versions. | |
|
59
|
CVE-2026-116869 |
7.2 | 0.0030 | NET LOW CX NO UI | Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. | |
|
59
|
CVE-2026-118074 |
7.2 | 0.0030 | NET LOW CX NO UI | Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. | |
|
59
|
CVE-2026-118077 |
7.2 | 0.0030 | NET LOW CX NO UI | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 ve | |
|
59
|
CVE-2026-118078 |
7.2 | 0.0030 | NET LOW CX NO UI | Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3. | |
|
59
|
CVE-2026-118079 |
7.2 | 0.0030 | NET LOW CX NO UI | Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 version | |
|
58
|
CVE-2026-42611 |
8.9 | 0.0030 | NET LOW CX | Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with | |
|
57
|
CVE-2026-101744 |
8.4 | 0.0030 | NET NO UI | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle | |
|
54
|
CVE-2026-54070 |
7.1 | 0.0030 | NET NO AUTH | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, r | |
|
54
|
CVE-2026-57918 |
7.1 | 0.0030 | NET NO AUTH | libnfs through 6.0.2 before 935b8db has an xid integer underflow in READ_IOVEC i |