Katalog CVE (hal. 555)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.391 (Critical 36.349 · High 105.294 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 27.701–27.750 dari 263.391 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-32550 Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.	8.5 High	—	0,36%	27 Agt 2026
CVE-2026-32479 Advisory Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.	9.3 Critical	—	0,40%	27 Agt 2026
CVE-2026-27330 Unauthenticated Broken Access Control in Mobile App for WooCommerce <= 0.4.62 versions.	8.6 High	—	0,36%	27 Agt 2026
CVE-2026-78333 The 12 Step Meeting List WordPress plugin before 3.19.17 does not sanitise and escape a value submitted by unauthenticated users before storing it in its activity log and...	8.8 High	—	0,51%	27 Agt 2026
CVE-2026-78139 The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and i...	4.3 Medium	—	0,25%	27 Agt 2026
CVE-2026-78138 The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post...	4.3 Medium	—	0,30%	27 Agt 2026
CVE-2026-78137 The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attacker...	7.5 High	—	0,39%	27 Agt 2026
CVE-2026-78125 The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in all versions up to, and including, 4.0.2, allowing...	5.3 Medium	—	0,35%	27 Agt 2026
CVE-2026-77991 Advisory Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous fi...	9.4 Critical	—	0,64%	27 Agt 2026
CVE-2026-77990 Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1 - A non-manager can therefore read attendee name...	5.3 Medium	—	0,35%	27 Agt 2026
CVE-2026-77989 Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query...	5.3 Medium	—	0,44%	27 Agt 2026
CVE-2026-77035 Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-o...	5.1 Medium	—	0,39%	27 Agt 2026
CVE-2026-77034 Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 - Any visitor holding their own session to...	6.9 Medium	—	0,41%	27 Agt 2026
CVE-2026-77018 The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor validate the type of the file it subsequently writes into a...	8.8 High	—	0,73%	27 Agt 2026
CVE-2026-77017 The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory be...	7.7 High	—	0,43%	27 Agt 2026
CVE-2026-77016 The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored f...	9.6 Critical	—	0,43%	27 Agt 2026
CVE-2026-76549 The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attacker...	5.9 Medium	—	0,14%	27 Agt 2026
CVE-2026-59278 vmware spring for apache kafka JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper include java.net in their default trusted packages list. When these mappers are used — which is the default configurati...	6.5 Medium	—	0,27%	27 Agt 2026
CVE-2026-59275 vmware spring advanced message queuing protocol A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located...	4.9 Medium	—	0,45%	27 Agt 2026
CVE-2026-59274 vmware spring integration The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM...	6.5 Medium	—	0,42%	27 Agt 2026
CVE-2026-59271 vmware spring advanced message queuing protocol When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP...	6.5 Medium	—	0,32%	27 Agt 2026
CVE-2026-59270 Advisory vmware spring security Spring Security's embedded UnboundID LDAP server (UnboundIdContainer) unconditionally registers an administrative credential and binds its listener to all available netwo...	9.1 Critical	—	0,40%	27 Agt 2026
CVE-2026-47894 vmware spring cloud config Spring Cloud Config Server native environment repository allows exposure of configuration files outside of the configured repository path. Spring Cloud Config 5.0.0 - 5.0...	7.5 High	—	0,49%	27 Agt 2026
CVE-2026-47893 vmware spring framework A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason. Spr...	7.5 High	—	0,46%	27 Agt 2026
CVE-2026-47892 vmware spring framework A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request. Spring Framew...	9.8 Critical	—	0,53%	27 Agt 2026
CVE-2026-47891 Advisory vmware spring framework A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit. Spring Framework 7.0.0 - 7.0....	9.8 Critical	—	0,52%	27 Agt 2026
CVE-2026-47890 Advisory vmware spring framework Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments. Spring Framework 7.0.0 - 7.0.8 Spring Fra...	9.8 Critical	—	0,56%	27 Agt 2026
CVE-2026-47889 vmware spring framework A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Fram...	7.5 High	—	0,43%	27 Agt 2026
CVE-2026-47888 vmware spring framework A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19 Spring Framework 6.1....	7.5 High	—	0,46%	27 Agt 2026
CVE-2026-47887 vmware spring framework A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect....	6.1 Medium	—	0,24%	27 Agt 2026
CVE-2026-47886 vmware spring framework Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack when the power operator (^) i...	7.5 High	—	0,46%	27 Agt 2026
CVE-2026-47885 vmware spring framework The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring Framework...	7.5 High	—	0,37%	27 Agt 2026
CVE-2026-47884 Advisory vmware spring framework Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view n...	9.8 Critical	—	0,61%	27 Agt 2026
CVE-2026-47883 vmware spring framework UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both Spring MVC an...	6.1 Medium	—	0,26%	27 Agt 2026
CVE-2026-47881 broadcom spring batch Spring Batch's FlatFileItemReader supports files where a single logical record spans multiple physical lines — for example, a CSV field that contains embedded newlines wr...	7.5 High	—	0,41%	27 Agt 2026
CVE-2026-47880 vmware spring integration A producer who can publish to a JMS destination consumed by any Spring Integration JMS inbound component can set String JMS properties named replyChannel, errorChannel, o...	5.4 Medium	—	0,26%	27 Agt 2026
CVE-2026-47879 vmware spring cloud gateway Spring Cloud Gateway JsonToGrpcGatewayFilterFactory allows arbitrary Spring Resource locations for defining the proto descriptor. Spring Cloud Gateway 5.0.0 - 5.0.2 Sprin...	8.7 High	—	0,33%	27 Agt 2026
CVE-2026-47878 broadcom spring batch DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without a...	7.3 High	—	0,35%	27 Agt 2026
CVE-2026-47877 vmware spring security Spring Security Authorization Server's default consent page renders user-controlled values without HTML entity encoding. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0...	6.1 Medium	—	0,28%	27 Agt 2026
CVE-2026-47875 broadcom spring batch Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deserialization attack if they use an untrusted data so...	9.8 Critical	—	0,43%	27 Agt 2026
CVE-2026-47864 vmware spring integration SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and no class filtering. Any request with Content-Type...	9.8 Critical	—	5,9%	27 Agt 2026
CVE-2026-47849 vmware spring data rest Spring Data REST does not guard identifier (@Id) and version (@Version) properties against mutation via RFC 6902 JSON Patch (application/json-patch+json) requests. Spring...	7.1 High	—	0,35%	27 Agt 2026
CVE-2026-19715 The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.3.1 does not restrict access to the debug log it writes, which is stored at a fixed and publicly re...	7.5 High	—	0,43%	27 Agt 2026
CVE-2026-19454 The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator...	4.4 Medium	—	0,33%	27 Agt 2026
CVE-2026-19225 The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a...	6.6 Medium	—	0,49%	27 Agt 2026
CVE-2026-19223 The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite n...	7.2 High	—	0,67%	27 Agt 2026
CVE-2026-16569 The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowin...	4.3 Medium	—	0,25%	27 Agt 2026
CVE-2026-16568 The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the cus...	4.3 Medium	—	0,27%	27 Agt 2026
CVE-2026-16567 The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token and streaming the file, allowing unauthenticated a...	5.3 Medium	—	0,32%	27 Agt 2026
CVE-2026-13416 The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page, allowing users with the Editor role (w...	3.5 Low	—	0,24%	27 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.