Katalog CVE (hal. 552)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.383 (Critical 36.349 · High 105.290 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 27.551–27.600 dari 263.383 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-81681 Advisory jahlives openssl encrypt openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encrypted USB Workspace' with AES-256-GCM encryption and write a...	4.6 Medium	—	0,17%	27 Agt 2026
CVE-2026-81680 Advisory jahlives openssl encrypt openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without...	5.3 Medium	—	0,20%	27 Agt 2026
CVE-2026-81679 OpenRemote versions before 1.28.0 contain a cross-realm information disclosure vulnerability in the Notification REST API that allows per-realm tenant administrators to r...	7.7 High	—	0,39%	27 Agt 2026
CVE-2026-81678 AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and...	7.5 High	—	0,45%	27 Agt 2026
CVE-2026-81664 The OpenFaaS gateway registers GET /system/telemetry in gateway/main.go and, when basic_auth is enabled, wraps each administrative /system/* handler in auth.DecorateWithB...	5.3 Medium	—	0,37%	27 Agt 2026
CVE-2026-81335 Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/cont...	7.5 High	—	0,58%	27 Agt 2026
CVE-2026-81334 darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknet...	6.1 Medium	—	0,17%	27 Agt 2026
CVE-2026-81102 The Dash MCP server bound its listener to the loopback address but never checked the host a request named. src/mcp_server_dash.py constructed the server for its network m...	3.1 Low	—	0,18%	27 Agt 2026
CVE-2026-81101 The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given to its endp...	6.5 Medium	—	0,45%	27 Agt 2026
CVE-2026-81100 tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory...	6.8 Medium	—	0,22%	27 Agt 2026
CVE-2026-81099 tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared httpServerFactory hel...	6.8 Medium	—	0,22%	27 Agt 2026
CVE-2026-81098 The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the root path w...	9.1 Critical	—	0,73%	27 Agt 2026
CVE-2026-81097 The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning methods on Kerne...	8.4 High	—	0,24%	27 Agt 2026
CVE-2026-81096 ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no authentication. The executor behind the python_code_executor...	10.0 Critical	—	0,86%	27 Agt 2026
CVE-2026-81095 pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFactory helper a...	6.8 Medium	—	0,22%	27 Agt 2026
CVE-2026-81094 Advisory The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/src/command...	9.1 Critical	—	0,61%	27 Agt 2026
CVE-2026-81093 The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated the url argume...	8.6 High	—	0,52%	27 Agt 2026
CVE-2026-81092 mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamable_http.go and SSEServer.ServeHTTP in s...	6.8 Medium	—	0,22%	27 Agt 2026
CVE-2026-81091 The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/server/proxy...	8.6 High	—	0,47%	27 Agt 2026
CVE-2026-80213 An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A...	4.0 Medium	—	0,35%	27 Agt 2026
CVE-2026-80212 An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generi...	7.5 High	—	0,40%	27 Agt 2026
CVE-2026-80211 FrontAccounting through 2.4.20 stores and verifies user passwords as unsalted MD5 digests. admin/users.php passes md5($_POST['password']) to add_user() and update_user_pa...	5.9 Medium	—	0,31%	27 Agt 2026
CVE-2026-80210 FrontAccounting through 2.4.20 generates a CSRF token in end_form() in includes/ui/ui_controls.inc and embeds it as the _token hidden field in every form it renders, but...	6.5 Medium	—	0,22%	27 Agt 2026
CVE-2026-80209 The updateWorkspace handler in mods/identity/src/workspaces/createUpdateWorkspace.ts in Fonoster through 0.22.7 invokes the gRPC callback with PERMISSION_DENIED when crea...	4.3 Medium	—	0,39%	27 Agt 2026
CVE-2026-80208 APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honour...	8.2 High	—	0,44%	27 Agt 2026
CVE-2026-80207 APITable through 1.13.0-beta.1 annotates the create handler of InternalNotifyController with requiredLogin = false. ResourceInterceptor honours that annotation by returni...	5.3 Medium	—	0,39%	27 Agt 2026
CVE-2026-79988 The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previously disclose...	8.7 High	—	0,45%	27 Agt 2026
CVE-2026-79720 lutzroeder netron Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a...	5.0 Medium	—	0,26%	27 Agt 2026
CVE-2026-79719 lutzroeder netron Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a...	5.0 Medium	—	0,26%	27 Agt 2026
CVE-2026-79718 lutzroeder netron Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a...	5.0 Medium	—	0,26%	27 Agt 2026
CVE-2026-79653 In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.s...	6.0 Medium	—	0,47%	27 Agt 2026
CVE-2026-78251 DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file siz...	9.3 Critical	—	0,41%	27 Agt 2026
CVE-2026-78002 A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted s...	7.5 High	—	0,98%	27 Agt 2026
CVE-2026-75871 gitlab GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2....	9.6 Critical	—	0,34%	27 Agt 2026
CVE-2026-75573 mongodb bi connector In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corres...	5.5 Medium	—	0,12%	27 Agt 2026
CVE-2026-75357 An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components.	9.8 Critical	—	0,93%	27 Agt 2026
CVE-2026-75159 mongodb bi connector An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted aut...	7.5 High	—	0,48%	27 Agt 2026
CVE-2026-71402 An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as the payload l...	5.4 Medium	—	0,25%	27 Agt 2026
CVE-2026-71401 An integer underflow was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c does not verify that the IP total length fiel...	5.3 Medium	—	0,26%	27 Agt 2026
CVE-2026-64896 Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue...	5.2 Medium	—	0,20%	27 Agt 2026
CVE-2026-5738 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in BilPark Informatics Technologies Industry and Trade Inc. DoXBASE all...	6.1 Medium	—	0,25%	27 Agt 2026
CVE-2026-5680 A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This...	7.5 High	—	1,1%	27 Agt 2026
CVE-2026-59280 vmware spring framework Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted inp...	4.3 Medium	—	0,35%	27 Agt 2026
CVE-2026-59272 vmware spring advanced message queuing protocol Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log e...	6.8 Medium	—	0,27%	27 Agt 2026
CVE-2026-57499 Liman is open source server management software. Prior to 2.2.2 - 1103, an OS command injection vulnerability in the log rotation configuration endpoint allows an authent...	9.1 Critical	—	1,4%	27 Agt 2026
CVE-2026-56652 Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special...	4.6 Medium	—	0,19%	27 Agt 2026
CVE-2026-56651 Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A loca...	2.0 Low	—	0,19%	27 Agt 2026
CVE-2026-40526 Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem pa...	6.5 Medium	—	0,80%	27 Agt 2026
CVE-2026-34674 adobe substance 3d painter Substance3D - Sampler versions 5.1.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context o...	7.8 High	—	0,34%	27 Agt 2026
CVE-2026-30073 An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.	7.5 High	—	0,46%	27 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.