Katalog CVE (hal. 681)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.859 (Critical 36.491 · High 105.819 · KEV 1.762 · sejak 2020) · Pembaruan terakhir: 29 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.001–34.050 dari 264.859 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-19996 A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behav...	4.3 Medium	—	0,38%	17 Agt 2026
CVE-2026-19995 A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Han...	3.5 Low	—	0,33%	17 Agt 2026
CVE-2026-19994 A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of...	6.3 Medium	—	0,40%	17 Agt 2026
CVE-2026-15623 A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an...	9.4 Critical	—	0,34%	17 Agt 2026
CVE-2026-74579 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: fix mask build for partial field offload nft_payload_offload_mask() builds t...	7.1 High	—	0,12%	17 Agt 2026
CVE-2026-19993 A vulnerability has been found in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the file /customer/account/rma/update-status o...	4.3 Medium	—	0,37%	17 Agt 2026
CVE-2026-19992 A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component...	3.1 Low	—	0,39%	17 Agt 2026
CVE-2026-19988 A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. P...	4.3 Medium	—	0,45%	17 Agt 2026
CVE-2026-19987 A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile...	5.3 Medium	—	0,51%	17 Agt 2026
CVE-2026-14832 The ShopSmart Loyalty for WooCommerce WordPress plugin through 1.0.0 does not perform any authorization or ownership check on a phone-number lookup exposed to unauthentic...	5.3 Medium	—	0,32%	17 Agt 2026
CVE-2026-13700 The WooMS WordPress plugin through 9.14 does not validate a user-supplied URL before using it in a server-side request and attaches stored third-party integration credent...	5.9 Medium	—	0,32%	17 Agt 2026
CVE-2026-19986 A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.j...	5.4 Medium	—	0,42%	17 Agt 2026
CVE-2026-19984 A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function get_images of the file src/mcp_florence2/__init__.py. This manipulat...	6.3 Medium	—	0,37%	17 Agt 2026
CVE-2026-19983 A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /us...	8.3 High	—	2,1%	17 Agt 2026
CVE-2026-19982 A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manip...	7.4 High	—	1,8%	17 Agt 2026
CVE-2026-19981 A weakness has been identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 a...	7.4 High	—	1,8%	17 Agt 2026
CVE-2026-19980 A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3...	7.4 High	—	0,39%	17 Agt 2026
CVE-2026-19979 A vulnerability was identified in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 a...	8.3 High	—	0,54%	17 Agt 2026
CVE-2026-19978 A flaw has been found in jiantao88 android-mcp-server up to cfb872b2446794193b58edd63f4dbf6af48a6292. The impacted element is the function child_process.exec of the file...	5.3 Medium	—	1,2%	17 Agt 2026
CVE-2026-50602 A security vulnerability has been identified in Planet9 due to incorrect file permissions assigned to an application executable used by the Planet9 background service. Th...	8.5 High	—	0,14%	17 Agt 2026
CVE-2026-50601 A security vulnerability has been identified in the Planet9 desktop application where a hardcoded read-only API key permitted unauthorized access to internal repositories...	6.6 Medium	—	0,41%	17 Agt 2026
CVE-2026-19977 A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing...	10.0 Critical	—	1,3%	17 Agt 2026
CVE-2026-19976 A security vulnerability has been detected in COMFAST CF-N1-S 2.6.0.1. Impacted is the function sub_44A968 of the file /cgi-bin/mbox-config?method=SET&section=ptest_macad...	6.6 Medium	—	2,9%	17 Agt 2026
CVE-2026-19975 A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the co...	3.1 Low	—	0,27%	17 Agt 2026
CVE-2026-19974 A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncoo...	5.6 Medium	—	0,59%	17 Agt 2026
CVE-2026-19973 A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. P...	6.3 Medium	—	0,33%	17 Agt 2026
CVE-2026-19972 A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argu...	6.3 Medium	—	0,33%	17 Agt 2026
CVE-2026-19971 A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation cau...	4.7 Medium	—	0,42%	17 Agt 2026
CVE-2026-19970 A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/As...	6.3 Medium	—	0,45%	17 Agt 2026
CVE-2026-19969 A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DG...	5.4 Medium	—	0,50%	17 Agt 2026
CVE-2026-19968 A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library c...	4.3 Medium	—	0,37%	17 Agt 2026
CVE-2026-19967 A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Com...	6.3 Medium	—	0,45%	17 Agt 2026
CVE-2026-19966 A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the c...	5.4 Medium	—	0,41%	17 Agt 2026
CVE-2026-19965 A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controller...	3.7 Low	—	0,49%	17 Agt 2026
CVE-2026-19964 A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. This affects the function PythonREPL.run of the file jij_mcp/python_repr.py of the component jm_check. The mani...	5.5 Medium	—	0,30%	17 Agt 2026
CVE-2026-19963 A vulnerability has been found in Edimax EW-7478APC 1.04. Affected by this issue is the function stainfo of the file /goform/stainfo. The manipulation of the argument int...	7.4 High	—	2,0%	17 Agt 2026
CVE-2026-19962 A flaw has been found in Edimax EW-7478APC 1.04. Affected by this vulnerability is the function setWAN of the file /goform/setWAN. Executing a manipulation of the argumen...	7.4 High	—	2,0%	17 Agt 2026
CVE-2026-19961 A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the a...	9.9 Critical	—	0,81%	16 Agt 2026
CVE-2026-19960 A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argu...	7.4 High	—	2,0%	16 Agt 2026
CVE-2026-19959 A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argu...	9.9 Critical	—	0,81%	16 Agt 2026
CVE-2026-19958 A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component exec...	6.3 Medium	—	0,39%	16 Agt 2026
CVE-2026-19957 A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such m...	6.3 Medium	—	0,37%	16 Agt 2026
CVE-2026-19956 A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. Such manipul...	6.3 Medium	—	0,37%	16 Agt 2026
CVE-2026-19955 A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-...	3.5 Low	—	0,41%	16 Agt 2026
CVE-2026-74797 OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or modul...	3.1 Low	—	0,28%	16 Agt 2026
CVE-2026-74796 OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a trusted wor...	6.1 Medium	—	0,34%	16 Agt 2026
CVE-2026-74795 Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the E...	7.5 High	—	0,58%	16 Agt 2026
CVE-2026-74794 Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply c...	7.5 High	—	0,49%	16 Agt 2026
CVE-2026-74792 Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse th...	7.5 High	—	0,53%	16 Agt 2026
CVE-2026-74791 Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. At...	8.6 High	—	0,43%	16 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.