Katalog CVE (hal. 741)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.042 (Critical 36.621 · High 106.282 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 37.001–37.050 dari 266.042 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-71407 fortinet fortios A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack pro...	8.1 High	—	0,51%	12 Agt 2026
CVE-2026-70468 fortinet fortimanager, fortinet fortimanager cloud A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2....	8.1 High	—	0,46%	12 Agt 2026
CVE-2026-70467 fortinet fortisiem A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions,...	3.8 Low	—	0,26%	12 Agt 2026
CVE-2026-70466 fortinet fortiweb A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all v...	5.3 Medium	—	0,31%	12 Agt 2026
CVE-2026-57858 Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event ow...	8.9 High	—	0,37%	12 Agt 2026
CVE-2026-53996 NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGR...	7.0 High	—	0,13%	12 Agt 2026
CVE-2026-47226 Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete f...	6.5 Medium	—	0,35%	12 Agt 2026
CVE-2026-26035 fortinet fortiweb An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, Fo...	9.8 Critical	—	0,75%	12 Agt 2026
CVE-2026-70560 Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrar...	5.4 Medium	—	0,20%	12 Agt 2026
CVE-2026-70465 fortinet forticlient A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 throug...	8.1 High	—	0,52%	12 Agt 2026
CVE-2026-18044 The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later uses to address the message sent by its property requ...	3.7 Low	—	0,14%	12 Agt 2026
CVE-2026-17008 The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid o...	5.3 Medium	—	0,16%	12 Agt 2026
CVE-2026-16990 The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, al...	5.3 Medium	—	0,32%	12 Agt 2026
CVE-2026-16747 The Kirki WordPress plugin before 6.2.1 does not properly authorise its front-end form submission REST routes and passes attacker-controlled input through shortcode execu...	6.5 Medium	—	0,37%	12 Agt 2026
CVE-2026-16621 The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that payment actually succeeded before completing an order in its PayPal retur...	5.3 Medium	—	0,16%	12 Agt 2026
CVE-2026-15213 The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store / bank-transfer settlement callback: an unauthenticated r...	5.3 Medium	—	0,16%	12 Agt 2026
CVE-2026-15045 The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during check...	6.5 Medium	—	0,34%	12 Agt 2026
CVE-2026-11325 Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src/in...	8.8 High	—	0,68%	12 Agt 2026
CVE-2026-68868 apache-airflow-providers-google The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `t...	6.5 Medium	—	0,60%	12 Agt 2026
CVE-2026-67284 Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related opera...	5.3 Medium	—	0,35%	12 Agt 2026
CVE-2026-64955 When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution. Velociraptor fails...	6.1 Medium	—	0,36%	12 Agt 2026
CVE-2026-64952 The hunt_delete() VQL function allows deleting hunts. Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator"...	6.5 Medium	—	0,30%	12 Agt 2026
CVE-2026-64951 A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process. The p...	3.5 Low	—	0,28%	12 Agt 2026
CVE-2026-18663 A flaw was found in 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session Tracking critical-control rejection path witho...	5.9 Medium	—	0,51%	12 Agt 2026
CVE-2026-18652 Velociraptor allows reading Stacked result sets from the GUI. Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by th...	6.5 Medium	—	0,34%	12 Agt 2026
CVE-2026-67283 Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related ope...	6.9 Medium	—	0,42%	12 Agt 2026
CVE-2026-67282 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend...	10.0 Critical	—	0,78%	12 Agt 2026
CVE-2026-19566 Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The _encode method accepts any prefix le...	7.5 High	—	0,63%	12 Agt 2026
CVE-2026-19426 POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.	8.2 High	—	0,52%	12 Agt 2026
CVE-2025-41771 An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQ...	4.3 Medium	—	0,27%	12 Agt 2026
CVE-2025-41770 An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client ap...	7.5 High	—	0,55%	12 Agt 2026
CVE-2025-41769 The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit th...	9.8 Critical	—	0,84%	12 Agt 2026
CVE-2026-66659 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affe...	9.3 Critical	—	0,40%	12 Agt 2026
CVE-2026-19594 Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weakn...	8.1 High	—	0,50%	12 Agt 2026
CVE-2026-19217 The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow user...	5.4 Medium	—	0,23%	12 Agt 2026
CVE-2026-19073 The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that...	5.3 Medium	—	0,35%	12 Agt 2026
CVE-2026-19052 The ProSolution WP Client WordPress plugin before 2.0.9 does not perform capability checks on two administrative AJAX actions, and the nonce they rely on is published on...	4.3 Medium	—	0,25%	12 Agt 2026
CVE-2026-19050 The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before perform...	6.4 Medium	—	0,23%	12 Agt 2026
CVE-2026-18962 The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-...	4.3 Medium	—	0,25%	12 Agt 2026
CVE-2026-18943 The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read...	6.5 Medium	—	0,37%	12 Agt 2026
CVE-2026-18789 The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a se...	7.5 High	—	0,41%	12 Agt 2026
CVE-2026-18474 The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by...	8.6 High	—	0,45%	12 Agt 2026
CVE-2026-18391 The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, le...	9.8 Critical	—	0,96%	12 Agt 2026
CVE-2026-18366 The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrel...	9.8 Critical	—	0,50%	12 Agt 2026
CVE-2026-18230 The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actio...	8.1 High	—	0,39%	12 Agt 2026
CVE-2026-18057 The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it in a SQL statement, allowing users with a subscribe...	8.1 High	—	0,39%	12 Agt 2026
CVE-2026-18049 The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public endpoint actions and builds an option name...	7.5 High	—	0,43%	12 Agt 2026
CVE-2026-18048 The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, an...	7.5 High	—	0,38%	12 Agt 2026
CVE-2026-18046 The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocati...	4.3 Medium	—	0,31%	12 Agt 2026
CVE-2026-18035 The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content...	5.3 Medium	—	0,32%	12 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.