csirt@kutim:~/threat-intel/cve
$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.314 (Critical 36.225 · High 104.856 · KEV 1.754 · sejak 2020)  ·  Pembaruan terakhir: 22 Okt 2026, 06:31 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 18.451–18.500 dari 262.314 CVE.

CVE Severity KEV EPSS Terbit
CVE-2026-76689
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker wit...
7.2 High — 0,85% 15 Sep 2026
CVE-2026-76688
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor...
7.5 High — 0,38% 15 Sep 2026
CVE-2026-76687
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Su...
7.5 High — 0,47% 15 Sep 2026
CVE-2026-76686
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote att...
7.5 High — 0,57% 15 Sep 2026
CVE-2026-76685
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remot...
8.1 High — 0,67% 15 Sep 2026
CVE-2026-76684
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumve...
8.1 High — 0,46% 15 Sep 2026
CVE-2026-76683
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitra...
8.1 High — 0,59% 15 Sep 2026
CVE-2026-76682
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer ove...
8.2 High — 0,69% 15 Sep 2026
CVE-2026-76681
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what...
8.5 High — 0,35% 15 Sep 2026
CVE-2026-76680
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF...
8.5 High — 0,36% 15 Sep 2026
CVE-2026-76679
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitati...
8.6 High — 0,46% 15 Sep 2026
CVE-2026-76678
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Succes...
8.8 High — 0,63% 15 Sep 2026
CVE-2026-76677
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to a...
8.8 High — 0,54% 15 Sep 2026
CVE-2026-76676
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute a...
8.8 High — 0,35% 15 Sep 2026
CVE-2026-76675 Advisory
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacke...
9.1 Critical — 1,5% 15 Sep 2026
CVE-2026-76674 Advisory
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker...
9.8 Critical — 1,0% 15 Sep 2026
CVE-2026-76673 Advisory
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing aut...
9.8 Critical — 0,61% 15 Sep 2026
CVE-2026-76672 Advisory
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only pr...
9.9 Critical — 0,53% 15 Sep 2026
CVE-2026-76670 Advisory
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authe...
9.9 Critical — 0,50% 15 Sep 2026
CVE-2026-76669 Advisory
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authe...
9.9 Critical — 0,50% 15 Sep 2026
CVE-2026-73966
Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.7. Easily exploitable...
7.2 High — 0,46% 15 Sep 2026
CVE-2026-73965
oracle siebel crm
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.7. Difficult to expl...
6.8 Medium — 0,29% 15 Sep 2026
CVE-2026-73963
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
9.8 Critical — 0,51% 15 Sep 2026
CVE-2026-73962
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.6 Critical — 0,36% 15 Sep 2026
CVE-2026-73961
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E...
9.8 Critical — 0,48% 15 Sep 2026
CVE-2026-73960
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Ren Server). Supported versions that are affected are 8.61-8.63. Easily e...
7.5 High — 0,46% 15 Sep 2026
CVE-2026-73959
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0...
8.8 High — 0,43% 15 Sep 2026
CVE-2026-73958
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
8.1 High — 0,39% 15 Sep 2026
CVE-2026-73957
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
9.3 Critical — 0,38% 15 Sep 2026
CVE-2026-73956
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0...
9.8 Critical — 0,51% 15 Sep 2026
CVE-2026-73955
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exp...
7.3 High — 0,32% 15 Sep 2026
CVE-2026-73954
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63....
8.1 High — 0,37% 15 Sep 2026
CVE-2026-73953
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
9.8 Critical — 0,51% 15 Sep 2026
CVE-2026-73952
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
9.1 Critical — 0,43% 15 Sep 2026
CVE-2026-73951
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
8.1 High — 0,39% 15 Sep 2026
CVE-2026-73950
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.8 Critical — 0,51% 15 Sep 2026
CVE-2026-73949
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
8.8 High — 0,43% 15 Sep 2026
CVE-2026-73948
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0...
9.9 Critical — 0,43% 15 Sep 2026
CVE-2026-73947
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.8 Critical — 0,51% 15 Sep 2026
CVE-2026-73946
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.1 Critical — 0,49% 15 Sep 2026
CVE-2026-73945
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.9 Critical — 0,43% 15 Sep 2026
CVE-2026-73944
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.1 Critical — 0,43% 15 Sep 2026
CVE-2026-73943
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14....
7.6 High — 0,34% 15 Sep 2026
CVE-2026-73942
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14....
8.8 High — 0,43% 15 Sep 2026
CVE-2026-73941
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
8.6 High — 0,41% 15 Sep 2026
CVE-2026-73940
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.8 Critical — 0,51% 15 Sep 2026
CVE-2026-73926
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
8.7 High — 0,41% 15 Sep 2026
CVE-2026-73458
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD ses...
8.2 High — 0,40% 15 Sep 2026
CVE-2026-71163
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
9.9 Critical — 0,39% 15 Sep 2026
CVE-2026-71133
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
10.0 Critical — 0,51% 15 Sep 2026
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.