Katalog CVE (hal. 114)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.897 (Critical 35.936 · High 103.540 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 5.651–5.700 dari 258.897 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-94576 broadcom fabric operating system An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 1...	8.0 High	—	0,43%	8 Okt 2026
CVE-2026-87677 broadcom fabric operating system An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administ...	6.6 Medium	—	0,61%	8 Okt 2026
CVE-2026-87664 broadcom fabric operating system A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-...	7.8 High	—	0,12%	8 Okt 2026
CVE-2026-87663 broadcom fabric operating system An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 th...	6.7 Medium	—	0,67%	8 Okt 2026
CVE-2026-87662 broadcom fabric operating system Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade...	6.7 Medium	—	0,25%	8 Okt 2026
CVE-2026-87661 broadcom fabric operating system Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacke...	5.7 Medium	—	0,19%	8 Okt 2026
CVE-2026-17609 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via the submit...	9.1 Critical	—	0,31%	8 Okt 2026
CVE-2026-17196 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploa...	8.8 High	—	0,53%	8 Okt 2026
CVE-2026-107450 In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList...	5.4 Medium	—	0,21%	8 Okt 2026
CVE-2026-107449 linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occu...	3.4 Low	—	0,16%	8 Okt 2026
CVE-2023-5649 broadcom brocade active support connectivity gateway An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid input...	5.5 Medium	—	0,09%	8 Okt 2026
CVE-2023-5648 broadcom brocade active support connectivity gateway In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perfor...	6.1 Medium	—	0,16%	8 Okt 2026
CVE-2026-94584 broadcom fabric operating system A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication reques...	2.6 Low	—	0,14%	8 Okt 2026
CVE-2026-94580 broadcom fabric operating system An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10...	4.5 Medium	—	0,19%	8 Okt 2026
CVE-2026-94575 broadcom fabric operating system A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access...	5.7 Medium	—	0,17%	8 Okt 2026
CVE-2026-87688 broadcom fabric operating system An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certific...	6.8 Medium	—	0,13%	8 Okt 2026
CVE-2026-87687 broadcom fabric operating system An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted...	7.3 High	—	0,21%	8 Okt 2026
CVE-2026-87685 broadcom fabric operating system An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When pro...	6.8 Medium	—	0,18%	8 Okt 2026
CVE-2026-87675 broadcom fabric operating system An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When perfo...	6.8 Medium	—	0,66%	8 Okt 2026
CVE-2026-87674 broadcom fabric operating system A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient acces...	7.8 High	—	0,12%	8 Okt 2026
CVE-2026-87673 broadcom fabric operating system An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The...	7.2 High	—	1,8%	8 Okt 2026
CVE-2026-87667 broadcom fabric operating system An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. W...	4.5 Medium	—	0,19%	8 Okt 2026
CVE-2026-87666 broadcom fabric operating system An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updat...	8.0 High	—	2,6%	8 Okt 2026
CVE-2026-87660 broadcom fabric operating system An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0....	7.1 High	—	0,11%	8 Okt 2026
CVE-2026-107448 Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel G...	3.4 Low	—	0,14%	8 Okt 2026
CVE-2026-107446 containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted o...	6.8 Medium	—	0,41%	8 Okt 2026
CVE-2026-107445 A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An...	5.4 Medium	—	0,17%	8 Okt 2026
CVE-2026-107444 A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An auth...	4.3 Medium	—	0,20%	8 Okt 2026
CVE-2026-94583 broadcom fabric operating system A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurre...	2.6 Low	—	0,11%	8 Okt 2026
CVE-2026-94582 broadcom fabric operating system A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of...	7.8 High	—	0,14%	8 Okt 2026
CVE-2026-94578 broadcom fabric operating system Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework all...	8.8 High	—	0,39%	8 Okt 2026
CVE-2026-92862 The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a craft...	4.6 Medium	—	0,11%	8 Okt 2026
CVE-2026-92861 The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.	5.1 Medium	—	0,11%	8 Okt 2026
CVE-2026-87686 broadcom fabric operating system An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher ro...	4.3 Medium	—	0,18%	8 Okt 2026
CVE-2026-87684 broadcom fabric operating system A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet...	9.8 Critical	—	0,58%	8 Okt 2026
CVE-2026-87678 broadcom fabric operating system An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authe...	5.2 Medium	—	0,20%	8 Okt 2026
CVE-2026-87676 broadcom fabric operating system A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certific...	5.7 Medium	—	0,12%	8 Okt 2026
CVE-2026-87672 broadcom fabric operating system An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configu...	5.5 Medium	—	0,11%	8 Okt 2026
CVE-2026-87671 broadcom fabric operating system An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specifi...	7.5 High	—	0,40%	8 Okt 2026
CVE-2026-87670 broadcom fabric operating system An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints r...	4.3 Medium	—	0,18%	8 Okt 2026
CVE-2026-87669 broadcom fabric operating system A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of the...	4.3 Medium	—	0,18%	8 Okt 2026
CVE-2026-87668 broadcom fabric operating system A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for...	6.5 Medium	—	0,39%	8 Okt 2026
CVE-2026-87665 broadcom fabric operating system A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability oc...	7.5 High	—	0,79%	8 Okt 2026
CVE-2026-87659 broadcom fabric operating system A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the...	9.8 Critical	—	0,24%	8 Okt 2026
CVE-2017-20283 NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied recei...	6.5 Medium	—	1,2%	8 Okt 2026
CVE-2026-87726 Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access u...	3.9 Low	—	0,10%	8 Okt 2026
CVE-2026-87683 broadcom fabric operating system Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request...	8.8 High	—	0,48%	8 Okt 2026
CVE-2026-87682 broadcom fabric operating system Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input process...	8.8 High	—	1,7%	8 Okt 2026
CVE-2026-82627 The Uncanny Automator – AI + Automation for WordPress \| AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in al...	7.5 High	—	0,27%	8 Okt 2026
CVE-2026-102488 In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyo...	8.7 High	—	0,21%	8 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.