Katalog CVE (hal. 795)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.205 (Critical 36.640 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 39.701–39.750 dari 266.205 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-71293 Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-fact...	6.2 Medium	—	0,37%	5 Agt 2026
CVE-2026-71292 Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but f...	7.2 High	—	0,57%	5 Agt 2026
CVE-2026-71291 Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field....	8.8 High	—	0,55%	5 Agt 2026
CVE-2026-71289 The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly t...	9.8 Critical	—	0,68%	5 Agt 2026
CVE-2026-71288 Koha's guided report builder (reports/guided_reports.pl) reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into a...	8.8 High	—	0,55%	5 Agt 2026
CVE-2026-71287 Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore...	8.8 High	—	0,55%	5 Agt 2026
CVE-2026-71286 The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (fr...	6.1 Medium	—	0,26%	5 Agt 2026
CVE-2026-71285 Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression in...	8.1 High	—	0,38%	5 Agt 2026
CVE-2026-71284 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names...	7.2 High	—	0,92%	5 Agt 2026
CVE-2026-71283 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar ar...	4.9 Medium	—	0,43%	5 Agt 2026
CVE-2026-71282 ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw...	6.5 Medium	—	0,39%	5 Agt 2026
CVE-2026-71281 Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch....	8.8 High	—	0,50%	5 Agt 2026
CVE-2026-71280 go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP val...	8.5 High	—	0,30%	5 Agt 2026
CVE-2026-71279 Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parameter received via an MQTT message (topic zigbee2mqtt/bridge/request/extension/sav...	8.0 High	—	0,57%	5 Agt 2026
CVE-2026-71278 rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not tak...	9.8 Critical	—	0,67%	5 Agt 2026
CVE-2026-71277 rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value a...	9.1 Critical	—	0,42%	5 Agt 2026
CVE-2026-71276 Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolates it direc...	7.1 High	—	0,32%	5 Agt 2026
CVE-2026-71275 OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested...	5.4 Medium	—	0,23%	5 Agt 2026
CVE-2026-71274 OpenBK7231T's CHANNEL_SetLabel (src/cmnds/cmd_channels.c) stores channel labels received via the MQTT SetChannelLabel command using strdup with no HTML sanitization. CHAN...	8.5 High	—	0,28%	5 Agt 2026
CVE-2026-71273 OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the parameter is absent from...	6.5 Medium	—	0,17%	5 Agt 2026
CVE-2026-71272 Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting...	8.5 High	—	0,26%	5 Agt 2026
CVE-2026-71271 Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsU...	8.5 High	—	0,33%	5 Agt 2026
CVE-2026-71270 Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that w...	8.6 High	—	0,43%	5 Agt 2026
CVE-2026-71268 OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) program files and writes the referenced content...	9.9 Critical	—	0,58%	5 Agt 2026
CVE-2026-71267 microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a stack-allocated mtar...	9.8 Critical	—	0,55%	5 Agt 2026
CVE-2026-71266 tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpy(linebuf, p,...	7.8 High	—	0,17%	5 Agt 2026
CVE-2026-71265 Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fix...	7.5 High	—	0,29%	5 Agt 2026
CVE-2026-71264 WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correct...	8.2 High	—	0,33%	5 Agt 2026
CVE-2026-71263 The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater-than comparison inst...	9.1 Critical	—	0,50%	5 Agt 2026
CVE-2026-71262 IoTSharp BlobStorageController.cs lacks the [Authorize] attribute applied to every other controller in the application (DevicesController, CustomersController, TenantsCon...	9.8 Critical	—	0,63%	5 Agt 2026
CVE-2026-71261 dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacit...	7.8 High	—	0,17%	5 Agt 2026
CVE-2026-71260 ESPHome through 2026.7.0-dev discloses plaintext passwords via its web_server component. In WebServer::text_json_ (esphome/components/web_server/web_server.cpp), a text e...	6.5 Medium	—	0,28%	5 Agt 2026
CVE-2026-71259 ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/config_validation.py. Because binds tighter than , any file: URI passe...	8.6 High	—	0,17%	5 Agt 2026
CVE-2026-71227 redhat hardened images, redhat openshift container platform +2 lainnya A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle afte...	5.1 Medium	—	0,20%	5 Agt 2026
CVE-2026-71226 redhat hardened images, redhat openshift container platform +2 lainnya Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel wri...	7.3 High	—	0,14%	5 Agt 2026
CVE-2026-71225 redhat hardened images, redhat openshift container platform +2 lainnya A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (CTR) or Cipher Block C...	6.5 Medium	—	0,35%	5 Agt 2026
CVE-2026-16022 @oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through string concatenation a...	7.8 High	—	0,82%	5 Agt 2026
CVE-2026-0516 A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall...	6.5 Medium	—	0,34%	5 Agt 2026
CVE-2026-71256 nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identification_basic / recv_read_device_identification...	9.8 Critical	—	0,55%	5 Agt 2026
CVE-2026-71255 nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identific...	8.6 High	—	0,39%	5 Agt 2026
CVE-2026-71254 nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The fun...	9.8 Critical	—	0,55%	5 Agt 2026
CVE-2026-64582 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxe_mmap rxe_mmap() removes a rxe_mmap_info struct from th...	7.8 High	—	0,17%	5 Agt 2026
CVE-2026-61891 eclipse theia In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /files/`, `PUT /files/`) tha...	7.5 High	—	0,53%	5 Agt 2026
CVE-2026-46581 eclipse mojarra In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify...	7.5 High	—	0,56%	5 Agt 2026
CVE-2026-18933 The wp-downloadmanager WordPress plugin, in version 1.68.11 (also affecting the 6.9.4 release line), allows an admin-privileged user (current_user_can('manage_downloads')...	7.2 High	—	0,50%	5 Agt 2026
CVE-2026-71252 toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related admin subdirectories)...	8.2 High	—	0,51%	5 Agt 2026
CVE-2026-71251 Akaunting's shared download route (app/Http/Controllers/Common/Uploads.php::download, reachable at uploads/{id}/download behind only generic auth middleware) fetched the...	6.5 Medium	—	0,34%	5 Agt 2026
CVE-2026-71250 Firefly III's webhook URL validator (IsValidWebhookUrl.php) filters most private/reserved IPv4 ranges but contains an explicit early-return that allows any resolved addre...	4.3 Medium	—	0,28%	5 Agt 2026
CVE-2026-71249 299Ko's public contact form (plugin/contact/controllers/ContactController.php, home) sets raw POST field values (name, firstname, email, message) into the page template w...	6.1 Medium	—	0,25%	5 Agt 2026
CVE-2026-71248 Inventory-Management-System-PHP's login.php constructs its authentication query via direct string concatenation of raw POST parameters: = "select * from user where email...	9.8 Critical	—	0,75%	5 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.