Katalog CVE (hal. 2) — KUTIM-CSIRT

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.501 (Critical 35.796 · High 102.981 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 51–100 dari 257.501 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-97381 Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPerm...	9.9 Critical	—	—	13 Okt 2026
CVE-2026-95634 CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not r...	8.6 High	—	—	13 Okt 2026
CVE-2026-95633 CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could...	7.5 High	—	—	13 Okt 2026
CVE-2026-95632 CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could...	7.5 High	—	—	13 Okt 2026
CVE-2026-94453 Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious)...	7.5 High	—	—	13 Okt 2026
CVE-2026-84790 OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field	7.6 High	—	—	13 Okt 2026
CVE-2026-84420 Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, an...	5.8 Medium	—	—	13 Okt 2026
CVE-2026-84419 Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and be...	6.8 Medium	—	—	13 Okt 2026
CVE-2026-77207 Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7...	7.5 High	—	—	13 Okt 2026
CVE-2026-77206 Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machin...	7.5 High	—	—	13 Okt 2026
CVE-2026-77205 Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates w...	3.7 Low	—	—	13 Okt 2026
CVE-2026-48378 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	5.3 Medium	—	—	13 Okt 2026
CVE-2026-48377 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	5.3 Medium	—	—	13 Okt 2026
CVE-2026-106627 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	—	13 Okt 2026
CVE-2026-105902 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	—	13 Okt 2026
CVE-2026-104345 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-103820 CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary fi...	5.5 Medium	—	—	13 Okt 2026
CVE-2026-103297 CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could...	7.5 High	—	—	13 Okt 2026
CVE-2026-103296 CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could...	7.5 High	—	—	13 Okt 2026
CVE-2026-103294 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	5.9 Medium	—	—	13 Okt 2026
CVE-2026-102502 CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could...	5.3 Medium	—	—	13 Okt 2026
CVE-2026-102501 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	5.3 Medium	—	—	13 Okt 2026
CVE-2026-100139 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	—	13 Okt 2026
CVE-2026-100138 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	—	13 Okt 2026
CVE-2026-100137 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	—	13 Okt 2026
CVE-2026-100136 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit th...	7.5 High	—	—	13 Okt 2026
CVE-2026-100135 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-100125 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	5.9 Medium	—	—	13 Okt 2026
CVE-2026-100124 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-100123 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	7.5 High	—	—	13 Okt 2026
CVE-2026-100122 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	7.5 High	—	—	13 Okt 2026
CVE-2026-100121 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	7.5 High	—	—	13 Okt 2026
CVE-2026-100120 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-100119 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-100118 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	7.5 High	—	—	13 Okt 2026
CVE-2026-100117 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-100116 CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vu...	5.9 Medium	—	—	13 Okt 2026
CVE-2026-100115 CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabil...	7.5 High	—	—	13 Okt 2026
CVE-2026-100114 CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabil...	7.5 High	—	—	13 Okt 2026
CVE-2026-100113 CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...	7.5 High	—	—	13 Okt 2026
CVE-2026-97312 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	—	13 Okt 2026
CVE-2026-96956 Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.	8.0 High	—	—	13 Okt 2026
CVE-2026-96523 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	—	13 Okt 2026
CVE-2026-96522 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	—	13 Okt 2026
CVE-2026-96521 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	—	13 Okt 2026
CVE-2026-95696 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.	6.5 Medium	—	—	13 Okt 2026
CVE-2026-95695 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.	7.4 High	—	—	13 Okt 2026
CVE-2026-95641 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...	7.8 High	—	—	13 Okt 2026
CVE-2026-95640 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabil...	5.5 Medium	—	—	13 Okt 2026
CVE-2026-95639 Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker co...	8.6 High	—	—	13 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.