Katalog CVE (hal. 556)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.383 (Critical 36.349 · High 105.290 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 27.751–27.800 dari 263.383 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-13415 The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the Editor rol...	7.2 High	—	0,46%	27 Agt 2026
CVE-2026-13414 The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain (and exposed t...	4.8 Medium	—	0,22%	27 Agt 2026
CVE-2026-81491 A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file src/index.t...	7.3 High	—	0,59%	27 Agt 2026
CVE-2026-16895 A logic vulnerability (fail-open condition) has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the data...	5.1 Medium	—	0,23%	27 Agt 2026
CVE-2026-81486 A vulnerability was detected in bsmi021 mcp-file-context-server 1.0.0. Affected by this issue is the function read_context of the file src/index.ts of the component Path...	5.3 Medium	—	0,69%	27 Agt 2026
CVE-2026-81485 A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/ca...	5.3 Medium	—	0,69%	27 Agt 2026
CVE-2026-19398 An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a c...	6.8 Medium	—	0,16%	27 Agt 2026
CVE-2026-81421 A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component raw_sentry_api. The manipulatio...	7.3 High	—	0,50%	27 Agt 2026
CVE-2026-80183 In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a...	7.1 High	—	0,38%	27 Agt 2026
CVE-2026-47874 pivotal reactor netty The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of...	5.3 Medium	—	0,40%	27 Agt 2026
CVE-2026-47863 broadcom reactor core In Reactor Core, applications that use the Flux.bufferTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3...	7.5 High	—	0,41%	27 Agt 2026
CVE-2026-47862 vmware spring integration An attacker who can set the file_name header on a message reaching a ZipTransformer with ZipResultType.FILE (the default) can cause the resulting .zip archive to be writt...	5.4 Medium	—	0,30%	27 Agt 2026
CVE-2026-47861 vmware spring integration An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to a...	6.3 Medium	—	0,33%	27 Agt 2026
CVE-2026-47860 vmware spring advanced message queuing protocol An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single ~1 MB message. Spring AM...	6.5 Medium	—	0,42%	27 Agt 2026
CVE-2026-47859 vmware spring integration RFC6587SyslogDeserializer, used by the Spring Integration syslog TCP inbound adapter to decode RFC 6587 / RFC 5424 frames, trusts the sender-supplied octet count of an oc...	6.5 Medium	—	0,29%	27 Agt 2026
CVE-2026-47857 broadcom reactor core In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Reactor Core 3...	5.9 Medium	—	0,37%	27 Agt 2026
CVE-2026-47856 vmware spring integration Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserialization target type, and resolves that header value to a class with Cl...	6.3 Medium	—	0,31%	27 Agt 2026
CVE-2026-47852 Advisory vmware spring ai A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI...	7.5 High	—	0,35%	27 Agt 2026
CVE-2026-47851 vmware spring ai Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError in the ingestion thread. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI...	7.5 High	—	0,46%	27 Agt 2026
CVE-2026-47850 vmware spring data rest Spring Data REST does not preserve the persisted version (@Version) property of an aggregate root when handling an HTTP PUT against an immutable target type. Spring Data...	4.3 Medium	—	0,31%	27 Agt 2026
CVE-2026-47845 broadcom reactor netty In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled. In order for this to happen, the applica...	5.3 Medium	—	0,29%	27 Agt 2026
CVE-2026-81203 A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The m...	7.3 High	—	0,43%	26 Agt 2026
CVE-2026-80158 A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password whe...	5.5 Medium	—	0,15%	26 Agt 2026
CVE-2026-75340 The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).	9.1 Critical	—	0,40%	26 Agt 2026
CVE-2026-75338 disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /ap...	9.8 Critical	—	0,61%	26 Agt 2026
CVE-2026-75336 Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.	9.8 Critical	—	0,47%	26 Agt 2026
CVE-2026-75332 Zyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService.download().	9.1 Critical	—	0,44%	26 Agt 2026
CVE-2026-75330 The front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond-server <= 1.3.3 is vulnerable to SQL injection. The module parameter is direc...	9.8 Critical	—	0,47%	26 Agt 2026
CVE-2026-69129 KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 2.0.0, cluster-scoped APIs do not consistently validate per-cluster access, allowin...	5.8 Medium	—	0,41%	26 Agt 2026
CVE-2026-65956 KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API endpoints are exposed on the same public routing...	10.0 Critical	—	0,64%	26 Agt 2026
CVE-2026-47666 Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through custom font...	7.6 High	—	0,35%	26 Agt 2026
CVE-2026-47665 Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comment...	8.7 High	—	0,45%	26 Agt 2026
CVE-2026-21808 HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker w...	4.1 Medium	—	0,14%	26 Agt 2026
CVE-2026-21807 HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflo...	3.9 Low	—	0,12%	26 Agt 2026
CVE-2025-62341 HCL Connections is vulnerable to server-side request forgery (SSRF) when an internal server is compromised possibly allowing an attacker to send unauthorized requests in...	3.7 Low	—	0,19%	26 Agt 2026
CVE-2026-81202 A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operat...	7.3 High	—	0,69%	26 Agt 2026
CVE-2026-77611 SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can...	7.1 High	—	0,38%	26 Agt 2026
CVE-2026-77368 SeaweedFS is a distributed storage system for files and blobs. In version 4.39, the filer's TUS resumable-upload handler checks JWT allowed_prefixes scoping only when a s...	7.6 High	—	0,38%	26 Agt 2026
CVE-2026-77317 SeaweedFS is a distributed storage system for files and blobs. In versions from 3.88 through 4.39, the SFTP server evaluates configured path permissions with a literal st...	8.1 High	—	0,36%	26 Agt 2026
CVE-2026-77298 SeaweedFS is a distributed storage system for files and blobs. In versions 4.39 and earlier, the S3 API accepts an external OIDC JWT sent directly in the Authorization he...	8.7 High	—	0,40%	26 Agt 2026
CVE-2026-75333 yx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are directly passed to new File() for file system operations without any path...	7.5 High	—	0,50%	26 Agt 2026
CVE-2026-75331 tamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and /imgUpload endpoints in FileUploadController.java and UEditorController....	4.6 Medium	—	0,23%	26 Agt 2026
CVE-2026-75329 The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism. Attackers can directly obtain the full configur...	9.8 Critical	—	0,61%	26 Agt 2026
CVE-2026-75328 In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:	7.5 High	—	0,50%	26 Agt 2026
CVE-2026-65930 LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative questio...	4.8 Medium	—	0,41%	26 Agt 2026
CVE-2026-65647 Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.	8.7 High	—	0,74%	26 Agt 2026
CVE-2026-65646 Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escala...	9.9 Critical	—	0,70%	26 Agt 2026
CVE-2026-65642 Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databa...	8.6 High	—	0,48%	26 Agt 2026
CVE-2026-65641 A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.	9.3 Critical	—	0,54%	26 Agt 2026
CVE-2026-64632 A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.	8.5 High	—	0,35%	26 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.