Katalog CVE (hal. 823)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.229 (Critical 36.653 · High 106.363 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.101–41.150 dari 266.229 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-16971 The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.	5.9 Medium	—	0,33%	30 Jul 2026
CVE-2026-16970 The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a...	4.2 Medium	—	0,22%	30 Jul 2026
CVE-2026-16969 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function.	7.6 High	—	0,21%	30 Jul 2026
CVE-2026-18353 PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT and checks its unverified `iss` claim against an issuer allowlist using Python's `urlparse` before performi...	8.8 High	—	0,30%	30 Jul 2026
CVE-2026-7849 Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently exe...	9.8 Critical	—	0,75%	30 Jul 2026
CVE-2026-44108 Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window in which i...	9.8 Critical	—	0,83%	30 Jul 2026
CVE-2026-44107 A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is enabled by opening the port that C...	7.5 High	—	0,56%	30 Jul 2026
CVE-2026-44106 A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in full...	7.8 High	—	0,19%	30 Jul 2026
CVE-2026-44105 The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local attacker with access to the logs to authenticate vi...	6.6 Medium	—	0,14%	30 Jul 2026
CVE-2026-44104 The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an u...	9.8 Critical	—	0,41%	30 Jul 2026
CVE-2026-44103 An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without perform...	5.3 Medium	—	0,40%	30 Jul 2026
CVE-2026-44102 An unauthenticated remote attacker can trigger a firmware update download via the OCPP backend by supplying an invalid firmware file. This will cause the file to remain a...	5.3 Medium	—	0,34%	30 Jul 2026
CVE-2026-44101 Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Ser...	9.8 Critical	—	0,75%	30 Jul 2026
CVE-2026-44100 The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial-of-Service...	9.4 Critical	—	0,50%	30 Jul 2026
CVE-2026-44099 A privilege escalation vulnerability in the system configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in full system compro...	7.8 High	—	0,19%	30 Jul 2026
CVE-2026-44098 This vulnerability allows an unauthenticated remote attacker with control over the OCPP backend via firewall-bypass to perform an OS command injection, resulting in the e...	8.6 High	—	1,7%	30 Jul 2026
CVE-2026-44097 A low-privileged remote attacker with "operator" access can upload arbitrary files via the REST endpoint intended for firmware updates, resulting in persistent storage of...	7.1 High	—	0,43%	30 Jul 2026
CVE-2026-44096 A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise.	7.8 High	—	0,19%	30 Jul 2026
CVE-2026-44095 A privilege escalation vulnerability in a script used for network configuration allows a low-privileged local user to execute arbitrary commands as root, resulting in ful...	7.8 High	—	0,19%	30 Jul 2026
CVE-2026-44094 An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could al...	8.6 High	—	0,45%	30 Jul 2026
CVE-2026-44093 A local privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary commands as root, resulting in...	7.8 High	—	0,19%	30 Jul 2026
CVE-2026-44092 An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead...	9.1 Critical	—	0,68%	30 Jul 2026
CVE-2026-44091 An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may l...	9.1 Critical	—	0,59%	30 Jul 2026
CVE-2026-44090 Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to...	9.8 Critical	—	0,75%	30 Jul 2026
CVE-2026-13584 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX C...	7.1 High	—	0,19%	30 Jul 2026
CVE-2026-64635 Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of...	5.3 Medium	—	0,29%	30 Jul 2026
CVE-2026-59328 broadcom spring tools Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser (SWT Browser) with JavaScript enabled. Using untrusted and co...	5.4 Medium	—	0,17%	30 Jul 2026
CVE-2026-59327 broadcom spring tools Spring Tools for Eclipse stores the Spring Boot DevTools remote secret (spring.devtools.remote.secret) as a plain string attribute on the "Spring Boot DevTools Client" la...	4.4 Medium	—	0,11%	30 Jul 2026
CVE-2026-59326 broadcom spring tools The Spring Boot language server logs the raw value of the https_proxy/HTTPS_PROXY/http_proxy/HTTP_PROXY environment variable at INFO level whenever it creates an outbound...	3.3 Low	—	0,14%	30 Jul 2026
CVE-2026-58066 rocket.chat Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validated signatur...	9.8 Critical	—	0,38%	30 Jul 2026
CVE-2026-58046 Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk databas...	9.9 Critical	—	0,58%	30 Jul 2026
CVE-2026-58043 nodejs node.js A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`, an attacker who is granted a...	8.4 High	—	0,14%	30 Jul 2026
CVE-2026-58040 An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934)....	6.3 Medium	—	0,28%	30 Jul 2026
CVE-2026-56850 nodejs node.js A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests config...	4.4 Medium	—	0,08%	30 Jul 2026
CVE-2026-56847 nodejs node.js A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidenti...	6.1 Medium	—	0,16%	30 Jul 2026
CVE-2026-47882 broadcom spring tools When enabling Spring Boot DevTools support for a remote application target (for example a Docker container or Cloud Foundry app) from the Spring Tools Boot Dashboard, Spr...	8.3 High	—	0,24%	30 Jul 2026
CVE-2026-47873 broadcom spring tools The Boot Dashboard Docker integration in Spring Tools publishes container control ports on all of the host's network interfaces (0.0.0.0) rather than restricting them to...	8.0 High	—	0,29%	30 Jul 2026
CVE-2026-47858 broadcom spring tools Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execut...	8.0 High	—	0,33%	30 Jul 2026
CVE-2026-16531 An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and d...	5.3 Medium	—	0,51%	30 Jul 2026
CVE-2026-16530 A flaw was found in the PCP (Performance Co-Pilot) `pmproxy` service. A remote attacker can exploit a vulnerability in the `pmLogLoadInDom()` function by sending a specia...	6.5 Medium	—	0,49%	30 Jul 2026
CVE-2026-16529 A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds...	7.5 High	—	0,48%	30 Jul 2026
CVE-2026-16527 An unauthenticated remote attacker can bypass access controls by sending crafted requests to the PCP pmproxy /store endpoint. This allows the attacker to overwrite any PM...	7.3 High	—	0,59%	30 Jul 2026
CVE-2026-16526 A flaw in the PCP linux_sockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execu...	8.8 High	—	0,57%	30 Jul 2026
CVE-2026-16524 A command injection flaw in PCP's linux_sockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed validation lets attackers...	7.8 High	—	0,70%	30 Jul 2026
CVE-2026-15382 The Ultimate Addons for WPBakery Page Builder WordPress plugin before 3.21.4 does not perform a capability or nonce check before deleting a site's custom-uploaded icon fo...	6.5 Medium	—	0,37%	30 Jul 2026
CVE-2026-15257 The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action, allowing unauth...	5.3 Medium	—	0,30%	30 Jul 2026
CVE-2026-15255 The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested b...	5.3 Medium	—	0,32%	30 Jul 2026
CVE-2026-15252 The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a S...	5.4 Medium	—	0,29%	30 Jul 2026
CVE-2026-15250 The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an unauthenticated visitor can set through its public booking funnel,...	5.3 Medium	—	0,34%	30 Jul 2026
CVE-2026-15240 The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to the operator who initiated it, allowing a lower-privileged...	7.5 High	—	0,32%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.