Katalog CVE (hal. 386)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.397 (Critical 36.228 · High 104.890 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 22 Okt 2026, 12:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 19.251–19.300 dari 262.397 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-18117 concretecms concrete cms Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because the Edit Alias dialog applied only trim() to the sub...	5.4 Medium	—	0,14%	14 Sep 2026
CVE-2026-13265 IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through...	6.8 Medium	—	0,22%	14 Sep 2026
CVE-2026-12944 IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components co...	9.6 Critical	—	0,43%	14 Sep 2026
CVE-2026-12759 IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.	6.5 Medium	—	0,22%	14 Sep 2026
CVE-2026-12758 IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.	5.4 Medium	—	0,18%	14 Sep 2026
CVE-2026-12756 IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker cou...	7.1 High	—	0,29%	14 Sep 2026
CVE-2026-90896 Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts), exposed at GET /api/stripe/...	8.2 High	—	0,71%	14 Sep 2026
CVE-2026-90824 A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manip...	3.3 Low	—	0,18%	14 Sep 2026
CVE-2026-90820 A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function AuthorizationRequestHandlerDecorator.onListTasks of the file...	4.3 Medium	—	0,39%	14 Sep 2026
CVE-2026-90819 A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSender.dispatchNotification of the file server-commo...	7.3 High	—	0,66%	14 Sep 2026
CVE-2026-90818 A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of t...	4.3 Medium	—	0,54%	14 Sep 2026
CVE-2026-86924 apple ipados, apple iphone os +1 lainnya A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-86917 apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to g...	7.8 High	—	0,15%	14 Sep 2026
CVE-2026-86911 apple macos This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for s...	5.5 Medium	—	0,15%	14 Sep 2026
CVE-2026-86910 apple macos A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be...	5.5 Medium	—	0,18%	14 Sep 2026
CVE-2026-86909 apple macos A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks.	4.4 Medium	—	0,15%	14 Sep 2026
CVE-2026-86905 apple ipados, apple iphone os +2 lainnya This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete cre...	5.5 Medium	—	0,14%	14 Sep 2026
CVE-2026-86904 apple ipados, apple iphone os +1 lainnya A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to tra...	7.5 High	—	0,43%	14 Sep 2026
CVE-2026-86903 apple ipados, apple iphone os +4 lainnya An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-86902 apple macos A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app m...	5.5 Medium	—	0,18%	14 Sep 2026
CVE-2026-86901 apple macos An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cau...	7.1 High	—	0,17%	14 Sep 2026
CVE-2026-86900 apple macos An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cau...	6.5 Medium	—	0,34%	14 Sep 2026
CVE-2026-86898 apple safari, apple ipados +3 lainnya A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a malicious...	5.4 Medium	—	0,20%	14 Sep 2026
CVE-2026-86897 apple safari, apple ipados +3 lainnya This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visio...	5.5 Medium	—	0,16%	14 Sep 2026
CVE-2026-86895 apple ipados, apple iphone os +3 lainnya An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app m...	7.5 High	—	0,47%	14 Sep 2026
CVE-2026-86894 apple macos A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.	7.5 High	—	0,34%	14 Sep 2026
CVE-2026-86893 apple ipados, apple iphone os +3 lainnya A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read...	3.3 Low	—	0,14%	14 Sep 2026
CVE-2026-86892 apple ipados, apple iphone os +1 lainnya This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cau...	5.5 Medium	—	0,15%	14 Sep 2026
CVE-2026-86891 apple macos, apple watchos An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app...	3.5 Low	—	0,23%	14 Sep 2026
CVE-2026-86890 apple ipados, apple iphone os A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked devi...	4.6 Medium	—	0,21%	14 Sep 2026
CVE-2026-86889 apple macos A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An a...	4.8 Medium	—	0,20%	14 Sep 2026
CVE-2026-86888 apple ipados, apple iphone os +4 lainnya A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27,...	3.3 Low	—	0,14%	14 Sep 2026
CVE-2026-86887 apple ipados, apple iphone os +1 lainnya A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass...	3.3 Low	—	0,16%	14 Sep 2026
CVE-2026-86886 apple ipados, apple iphone os +1 lainnya A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able...	5.5 Medium	—	0,17%	14 Sep 2026
CVE-2026-86885 apple ipados, apple iphone os An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexp...	6.5 Medium	—	0,25%	14 Sep 2026
CVE-2026-86884 apple ipados, apple iphone os +3 lainnya A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able...	5.5 Medium	—	0,14%	14 Sep 2026
CVE-2026-86883 apple ipados, apple iphone os +1 lainnya A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.	5.5 Medium	—	0,15%	14 Sep 2026
CVE-2026-86882 apple ipados, apple iphone os +4 lainnya An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac...	6.5 Medium	—	0,48%	14 Sep 2026
CVE-2026-86881 apple ipados, apple iphone os +4 lainnya A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gat...	9.1 Critical	—	0,40%	14 Sep 2026
CVE-2026-86879 apple ipados, apple iphone os A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-se...	6.5 Medium	—	0,39%	14 Sep 2026
CVE-2026-86878 apple ipados, apple iphone os A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data.	5.5 Medium	—	0,15%	14 Sep 2026
CVE-2026-86876 apple ipados, apple iphone os +3 lainnya An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, mac...	5.2 Medium	—	0,15%	14 Sep 2026
CVE-2026-86870 apple ipados, apple iphone os +3 lainnya A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS...	6.5 Medium	—	0,45%	14 Sep 2026
CVE-2026-86869 apple ipados, apple iphone os +1 lainnya An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously...	6.5 Medium	—	0,34%	14 Sep 2026
CVE-2026-84636 apple ipados, apple iphone os +3 lainnya An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to...	5.5 Medium	—	0,14%	14 Sep 2026
CVE-2026-84635 apple safari, apple ipados +5 lainnya A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27...	6.5 Medium	—	0,37%	14 Sep 2026
CVE-2026-84632 apple ipados, apple iphone os +4 lainnya The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, ma...	7.3 High	—	0,17%	14 Sep 2026
CVE-2026-84631 apple macos This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges.	7.8 High	—	0,15%	14 Sep 2026
CVE-2026-84630 apple ipados, apple iphone os +4 lainnya A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15...	4.7 Medium	—	0,11%	14 Sep 2026
CVE-2026-84629 apple ipados, apple iphone os +3 lainnya This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerpr...	7.5 High	—	0,42%	14 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.