Katalog CVE (hal. 852)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.301 (Critical 36.664 · High 106.384 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.551–42.600 dari 266.301 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-40000 The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch th...	1.8 Low	—	0,20%	27 Jul 2026
CVE-2026-17534 Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal denylist in assertSafeFetchTarget, without resolvi...	5.5 Medium	—	0,16%	27 Jul 2026
CVE-2026-17527 In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI resources, includes a rule granting cre...	7.7 High	—	0,57%	27 Jul 2026
CVE-2026-17523 linux kernel In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet This patch switches the timer...	7.8 High	—	0,17%	27 Jul 2026
CVE-2026-65765 Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traver...	6.9 Medium	—	0,47%	27 Jul 2026
CVE-2026-65764 Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability.	5.1 Medium	—	0,44%	27 Jul 2026
CVE-2026-16554 davegamble cjson cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_characters counter, a 32-bit size_t, can...	7.8 High	—	0,37%	27 Jul 2026
CVE-2026-65894 This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting b...	8.7 High	—	0,66%	27 Jul 2026
CVE-2026-65893 This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with physical access could exploit this vulne...	7.0 High	—	0,23%	27 Jul 2026
CVE-2026-64536 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop The loop in is_ap_in_tkip() iterates ov...	8.1 High	—	0,26%	27 Jul 2026
CVE-2026-64535 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When...	9.8 Critical	—	0,55%	27 Jul 2026
CVE-2026-64534 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path In nvmet_tcp_try_recv_ddgs...	9.8 Critical	—	0,32%	27 Jul 2026
CVE-2026-64533 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay conversion log_replay() converts DIR_PAGE_ENTRY_32 reco...	7.8 High	—	0,14%	27 Jul 2026
CVE-2026-64532 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} In do_action()'s UpdateRe...	7.8 High	—	0,13%	27 Jul 2026
CVE-2026-64531 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as...	7.8 High	—	0,38%	27 Jul 2026
CVE-2026-14837 Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verif...	7.8 High	—	0,11%	27 Jul 2026
CVE-2026-9830 The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API names...	8.2 High	—	0,43%	27 Jul 2026
CVE-2026-66412 Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by s...	6.5 Medium	—	0,42%	27 Jul 2026
CVE-2026-14827 The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, al...	6.8 Medium	—	0,43%	27 Jul 2026
CVE-2026-14820 The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check func...	5.3 Medium	—	0,37%	27 Jul 2026
CVE-2026-14568 The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly veri...	6.5 Medium	—	0,34%	27 Jul 2026
CVE-2026-14289 The FacturaONE para WooCommerce con VeriFactu WordPress plugin before 5.37 does not authenticate one of its request handlers, whose only protection is derived from a cryp...	9.0 Critical	—	0,67%	27 Jul 2026
CVE-2026-14236 The Contact Form 7 WordPress plugin before 2.5 does not validate the host of a user-supplied return URL before using it as the success and cancel redirect targets of a S...	4.7 Medium	—	0,29%	27 Jul 2026
CVE-2026-14235 The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session nor expire it promptly, making the token a long-l...	7.5 High	—	0,39%	27 Jul 2026
CVE-2026-14203 The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users...	4.8 Medium	—	0,24%	27 Jul 2026
CVE-2026-14190 The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers befor...	6.1 Medium	—	0,28%	27 Jul 2026
CVE-2026-14189 The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator...	3.8 Low	—	0,27%	27 Jul 2026
CVE-2026-13726 The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform R...	7.1 High	—	0,28%	27 Jul 2026
CVE-2026-13714 The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.3.0 does not validate the type of uploaded files, and its file upload functionality is gated o...	9.8 Critical	—	0,83%	27 Jul 2026
CVE-2026-13597 The 微信二维码登陆 WordPress plugin through 1.3 does not properly validate WeChat webhook requests, as its signature check always passes, and it discloses the generated login co...	9.1 Critical	—	0,45%	27 Jul 2026
CVE-2026-13400 Simply Schedule Appointments is vulnerable to unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.12.2. The root cause is a sanitization-o...	6.1 Medium	—	0,25%	27 Jul 2026
CVE-2026-13390 The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity...	5.3 Medium	—	0,30%	27 Jul 2026
CVE-2026-13332 The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthent...	9.1 Critical	—	0,42%	27 Jul 2026
CVE-2026-13152 The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities m...	8.1 High	—	0,44%	27 Jul 2026
CVE-2026-12982 The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX a...	6.1 Medium	—	0,28%	27 Jul 2026
CVE-2026-12493 The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external payment record actually belongs to the WooCo...	7.5 High	—	0,36%	27 Jul 2026
CVE-2026-12394 The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with...	9.8 Critical	—	2,1%	27 Jul 2026
CVE-2026-12255 The MainWP Child WordPress plugin before 6.1.2 does not verify the requester's identity in its site-registration request handler when password authentication has been di...	8.1 High	—	0,47%	27 Jul 2026
CVE-2026-10082 The Advanced Ads WordPress plugin before 2.0.23 does not sanitize and escape a shortcode parameter before outputting it in the page, allowing users with the Contributor...	6.1 Medium	—	0,25%	27 Jul 2026
CVE-2025-15662 The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL before fetching it server-side and does no...	8.6 High	—	0,44%	27 Jul 2026
CVE-2026-15928 XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.	8.2 High	—	0,28%	27 Jul 2026
CVE-2026-17501 A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON...	5.3 Medium	—	0,72%	27 Jul 2026
CVE-2026-17500 A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulati...	5.3 Medium	—	0,72%	27 Jul 2026
CVE-2026-57990 microsoft edge chromium Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.	7.4 High	—	0,92%	26 Jul 2026
CVE-2026-57989 microsoft edge chromium Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.	7.4 High	—	0,43%	26 Jul 2026
CVE-2026-57978 microsoft edge chromium Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.	5.4 Medium	—	0,21%	26 Jul 2026
CVE-2026-17497 notegen NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilit...	8.3 High	—	0,75%	26 Jul 2026
CVE-2026-17496 notegen NoteGen before 0.32.0 renders AI chat responses with markdown-it configured with html:true and injects the result into the DOM via dangerouslySetInnerHTML in chat-preview...	8.1 High	—	0,55%	26 Jul 2026
CVE-2026-17459 A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resour...	4.3 Medium	—	0,47%	26 Jul 2026
CVE-2026-17458 A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Br...	6.3 Medium	—	0,40%	26 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.