Katalog CVE (hal. 586)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.973 (Critical 36.402 · High 105.447 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 29.251–29.300 dari 263.973 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-79783 rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits...	3.6 Low	—	0,23%	25 Agt 2026
CVE-2026-79782 rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaint...	3.1 Low	—	0,13%	25 Agt 2026
CVE-2026-79781 rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-79780 rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme o...	5.3 Medium	—	0,15%	25 Agt 2026
CVE-2026-79779 rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTT...	5.3 Medium	—	0,11%	25 Agt 2026
CVE-2026-79778 rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors....	5.3 Medium	—	0,29%	25 Agt 2026
CVE-2026-79777 rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions...	2.7 Low	—	0,30%	25 Agt 2026
CVE-2026-79776 rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /...	5.3 Medium	—	0,38%	25 Agt 2026
CVE-2026-79775 rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on...	6.5 Medium	—	0,37%	25 Agt 2026
CVE-2026-79774 Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\\Twig\\SecurityPolicy that allows authenticated backend user...	8.4 High	—	0,81%	25 Agt 2026
CVE-2026-79773 Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets permission...	4.9 Medium	—	0,49%	25 Agt 2026
CVE-2026-79772 nokogiri Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an...	5.3 Medium	—	0,34%	25 Agt 2026
CVE-2026-79771 nokogiri Nokogiri versions before 1.19.3 contain a memory leak in the XSLT Stylesheet transform method when processing Ruby strings containing null bytes. Attackers can exploit th...	5.3 Medium	—	0,42%	25 Agt 2026
CVE-2026-79770 nokogiri Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokeniz...	7.5 High	—	0,49%	25 Agt 2026
CVE-2026-79769 Nokogiri versions before 1.19.4 contain a possible invalid (out-of-bounds) memory read in the protected internal Node#initialize_copy_with_args helper behind Node#dup and...	5.5 Medium	—	0,31%	25 Agt 2026
CVE-2026-79676 nltk NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(),...	5.9 Medium	—	0,45%	25 Agt 2026
CVE-2026-79675 nltk NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags. A...	9.8 Critical	—	0,78%	25 Agt 2026
CVE-2026-79674 nltk NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root....	8.2 High	—	0,39%	25 Agt 2026
CVE-2026-70550 An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repo...	6.5 Medium	—	0,35%	25 Agt 2026
CVE-2026-70548 Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency.	3.5 Low	—	0,29%	25 Agt 2026
CVE-2026-55640 Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in next...	9.1 Critical	—	0,73%	25 Agt 2026
CVE-2026-55582 mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default security.yaml allows /usr/bin/git, while security.go...	8.4 High	—	0,27%	25 Agt 2026
CVE-2026-55581 mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowed_e...	8.4 High	—	0,45%	25 Agt 2026
CVE-2026-55580 mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCP_SH...	8.6 High	—	0,20%	25 Agt 2026
CVE-2026-55546 QWED-MCP is a deterministic verification gateway for MCP. Prior to 0.2.1, verify_math_expression() in src/qwed_mcp/engines/math_engine.py passes attacker-controlled expre...	9.8 Critical	—	0,73%	25 Agt 2026
CVE-2026-55539 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create_app function mounts /api/v1/runs without authentication. Any reachable caller can...	8.6 High	—	0,57%	25 Agt 2026
CVE-2026-55536 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server _handle_connection() checks Chrome extension origins with re.match() and the unanchored...	9.1 Critical	—	0,52%	25 Agt 2026
CVE-2026-55533 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, create_auth_middleware() allows requests when auth=api-key lacks PRAISONAI_API_KEY or JWT authenticati...	8.2 High	—	0,49%	25 Agt 2026
CVE-2026-55532 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream _validate_origin uses request_origin.startswith(allowed), allowing the attacker-contro...	7.6 High	—	0,20%	25 Agt 2026
CVE-2026-79717 A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management perm...	6.4 Medium	—	0,37%	25 Agt 2026
CVE-2026-70551 A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.	8.5 High	—	0,30%	25 Agt 2026
CVE-2026-69104 An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state...	7.6 High	—	0,31%	25 Agt 2026
CVE-2026-55624 MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or dupl...	5.3 Medium	—	0,40%	25 Agt 2026
CVE-2026-55541 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, praisonai serve agents and praisonai serve unified parse --api-key but _create_agents_app() and _creat...	8.8 High	—	0,48%	25 Agt 2026
CVE-2026-55540 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, is_path_within_directory() uses os.path.abspath() rather than os.path.realpath() for the workspace bou...	7.1 High	—	0,39%	25 Agt 2026
CVE-2026-55538 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, praisonai serve agents parses config["api_key"] but _create_agents_app() does not authenticate POST /a...	7.3 High	—	0,45%	25 Agt 2026
CVE-2026-55537 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, JobSubmitRequest.validate_webhook_url() accepts webhook_url when resolution raises socket.gaierror bec...	7.1 High	—	0,27%	25 Agt 2026
CVE-2026-55535 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the Jobs API validate_webhook_url() path fails open on socket.gaierror and does not bind the validated...	6.8 Medium	—	0,34%	25 Agt 2026
CVE-2026-55534 PraisonAI is a multi-agent teams system. From praisonai 4.6.34 until 4.6.58, praisonai serve agents accepts --api-key but _create_agents_app() does not authenticate POST...	8.6 High	—	0,45%	25 Agt 2026
CVE-2026-55531 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream mcp_post handler creates a new _sessions entry for every initialize request but do...	6.5 Medium	—	0,45%	25 Agt 2026
CVE-2026-55530 PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, ast_grep_rewrite lacks the @require_approval decorator used by sibling mutation tools. With dry_...	6.1 Medium	—	0,17%	25 Agt 2026
CVE-2026-55529 PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream _validate_origin method accepts request_origin.startswith(allowed), so the attacke...	6.9 Medium	—	0,18%	25 Agt 2026
CVE-2026-55528 PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, AgentServer exposes ServerConfig.auth_token but AgentServer._create_app does not check it on any...	8.2 High	—	0,49%	25 Agt 2026
CVE-2026-55527 PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the FileMemory constructor joins unsanitized user_id into self.user_path. A caller supplying ../...	7.1 High	—	0,48%	25 Agt 2026
CVE-2026-55526 PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, spider_tools._host_is_blocked() does not resolve ordinary hostnames before scrape_page fetches t...	8.5 High	—	0,36%	25 Agt 2026
CVE-2026-16599 GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as...	5.1 Medium	—	0,38%	25 Agt 2026
CVE-2026-16286 Unrestricted upload of file with dangerous type vulnerability in TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repos...	9.8 Critical	—	0,58%	25 Agt 2026
CVE-2026-15310 When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulti...	2.1 Low	—	0,53%	25 Agt 2026
CVE-2026-79655 A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a...	7.8 High	—	0,21%	25 Agt 2026
CVE-2026-79623 A security vulnerability has been detected in FishCodeTech Muteki up to 0.2.5. The affected element is an unknown function of the file .claude/settings.json of the compon...	6.3 Medium	—	1,8%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.