Katalog CVE (hal. 536)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.295 (Critical 36.348 · High 105.272 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 25 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 26.751–26.800 dari 263.295 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-82456 argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured. At...	10.0 Critical	—	1,7%	29 Agt 2026
CVE-2026-82454 The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extr...	9.1 Critical	—	0,39%	29 Agt 2026
CVE-2026-82453 rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can read API responses from user retrieval and l...	7.5 High	—	0,47%	29 Agt 2026
CVE-2026-82452 rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signature...	9.8 Critical	—	0,83%	29 Agt 2026
CVE-2026-82451 Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers ca...	6.1 Medium	—	0,36%	29 Agt 2026
CVE-2026-82450 BookStack before 26.05.4 contains a remote code execution vulnerability in the portable ZIP import functionality that allows users with Import Content and Create Books pe...	8.8 High	—	1,00%	29 Agt 2026
CVE-2026-82449 Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password verification. Attackers can mea...	5.3 Medium	—	0,42%	29 Agt 2026
CVE-2026-82448 Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries....	9.8 Critical	—	0,70%	29 Agt 2026
CVE-2026-82447 Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through...	8.8 High	—	0,78%	29 Agt 2026
CVE-2026-14494 The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via the handle_form_submission function. This...	9.8 Critical	—	0,69%	29 Agt 2026
CVE-2026-82364 A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. T...	4.2 Medium	—	0,29%	29 Agt 2026
CVE-2026-80725 In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation criteria When GRO attempts to aggregate packets beyo...	9.8 Critical	—	0,46%	29 Agt 2026
CVE-2026-81346 The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does not perform a capability check on one of its AJAX actions, allowing any authenticated user, such as...	4.3 Medium	—	0,25%	29 Agt 2026
CVE-2026-81342 The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied during user registration before using it, allowing un...	4.7 Medium	—	0,29%	29 Agt 2026
CVE-2026-81200 The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 does not correctly restrict access to order information, allowing any user with the instructor role t...	2.7 Low	—	0,30%	29 Agt 2026
CVE-2026-81026 The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before marking the...	4.8 Medium	—	0,22%	29 Agt 2026
CVE-2026-80488 The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values before using them in a SQL statement, which could al...	4.1 Medium	—	0,31%	29 Agt 2026
CVE-2026-80311 The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription belongs to the customer bound to the requesting customer-portal...	4.3 Medium	—	0,25%	29 Agt 2026
CVE-2026-77786 The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the set...	4.9 Medium	—	0,33%	29 Agt 2026
CVE-2026-77704 The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them change an app...	2.7 Low	—	0,28%	29 Agt 2026
CVE-2026-77012 The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does n...	9.3 Critical	—	0,35%	29 Agt 2026
CVE-2026-77010 The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation checks on its REST API routes and does not consistent...	6.5 Medium	—	0,28%	29 Agt 2026
CVE-2026-77008 The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, al...	6.5 Medium	—	0,43%	29 Agt 2026
CVE-2026-77007 The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform any authorisation check on one of its REST API routes, allowing una...	7.5 High	—	0,43%	29 Agt 2026
CVE-2026-76586 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount actually paid against the server-side price staged...	7.5 High	—	0,36%	29 Agt 2026
CVE-2026-76548 The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reser...	8.2 High	—	0,32%	29 Agt 2026
CVE-2026-76547 The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configuration file, allowing high privilege...	6.6 Medium	—	0,42%	29 Agt 2026
CVE-2026-76546 The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a role as low as contributor to...	6.8 Medium	—	0,43%	29 Agt 2026
CVE-2026-19430 The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forge...	5.3 Medium	—	0,19%	29 Agt 2026
CVE-2026-18234 The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet payment handling belongs to the requester, and does not deduct the wa...	6.5 Medium	—	0,17%	29 Agt 2026
CVE-2026-18233 The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints belongs to the requester, allowing any authenticat...	6.5 Medium	—	0,17%	29 Agt 2026
CVE-2026-17522 The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter...	5.4 Medium	—	0,09%	29 Agt 2026
CVE-2026-17520 The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving it from a publicly known value, allowing unauthent...	4.8 Medium	—	0,12%	29 Agt 2026
CVE-2026-16947 The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a user-supplied path before using it to build a server-side verification...	9.1 Critical	—	0,24%	29 Agt 2026
CVE-2026-16600 The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX actions and does not validate a user-supplied URL before fetching i...	7.7 High	—	0,20%	29 Agt 2026
CVE-2026-16259 The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through an unauthenticated profile-update action belongs to the requeste...	9.8 Critical	—	0,28%	29 Agt 2026
CVE-2026-16061 The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the URL of one of its public REST routes before using it in a SQL query,...	8.6 High	—	0,28%	29 Agt 2026
CVE-2026-10522 The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied during its frontend registration process, allowing unauthenticated att...	9.8 Critical	—	0,34%	29 Agt 2026
CVE-2026-41012 Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture...	7.7 High	—	0,10%	29 Agt 2026
CVE-2026-55867 Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by Users...	5.3 Medium	—	0,57%	28 Agt 2026
CVE-2026-55860 MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authen...	5.9 Medium	—	0,23%	28 Agt 2026
CVE-2026-55859 MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data u...	5.9 Medium	—	0,49%	28 Agt 2026
CVE-2026-55858 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and...	5.9 Medium	—	0,87%	28 Agt 2026
CVE-2026-55857 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication...	5.9 Medium	—	0,39%	28 Agt 2026
CVE-2026-55856 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application co...	5.9 Medium	—	0,44%	28 Agt 2026
CVE-2026-55855 MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/...	6.5 Medium	—	0,69%	28 Agt 2026
CVE-2026-55854 MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/...	5.9 Medium	—	0,42%	28 Agt 2026
CVE-2026-55848 mapfish-print is a component of MapFish for printing templated cartographic maps. Prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5, MapFish Print accepts an attacke...	8.6 High	—	0,53%	28 Agt 2026
CVE-2026-55841 Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value s...	7.5 High	—	0,63%	28 Agt 2026
CVE-2026-55785 free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/proc...	3.7 Low	—	0,45%	28 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.