Katalog CVE (hal. 519)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.288 (Critical 36.348 · High 105.269 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 25 Okt 2026, 12:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 25.901–25.950 dari 263.288 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-78607 elasticsearch Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only infe...	7.1 High	—	0,33%	1 Sep 2026
CVE-2026-78606 elastic kibana Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained b...	4.2 Medium	—	0,23%	1 Sep 2026
CVE-2026-78605 elasticsearch Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33...	5.9 Medium	—	0,34%	1 Sep 2026
CVE-2026-78603 elastic kibana Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenti...	4.3 Medium	—	0,29%	1 Sep 2026
CVE-2026-78597 elastic kibana Missing Authorization (CWE-862) in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by AC...	4.3 Medium	—	0,29%	1 Sep 2026
CVE-2026-78592 elastic kibana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the unauthorized deletion of privileged resources via Path T...	7.3 High	—	0,41%	1 Sep 2026
CVE-2026-76658 arubanetworks fabric composer A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access...	10.0 Critical	—	0,75%	1 Sep 2026
CVE-2026-76657 arubanetworks fabric composer Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauthenticated remote attacker to circumvent existing a...	10.0 Critical	—	0,75%	1 Sep 2026
CVE-2026-73748 arubanetworks fabric composer A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a clearte...	2.2 Low	—	0,16%	1 Sep 2026
CVE-2026-73747 arubanetworks fabric composer A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege opera...	2.5 Low	—	0,10%	1 Sep 2026
CVE-2026-73746 arubanetworks fabric composer A denial-of-service vulnerability exists in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of s...	3.1 Low	—	0,29%	1 Sep 2026
CVE-2026-73745 arubanetworks fabric composer A vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some information handled by the affected syst...	3.1 Low	—	0,30%	1 Sep 2026
CVE-2026-73744 arubanetworks fabric composer A denial-of-service vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an authenticated low privilege operator...	3.5 Low	—	0,29%	1 Sep 2026
CVE-2026-73743 arubanetworks fabric composer A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into some data hand...	3.7 Low	—	0,22%	1 Sep 2026
CVE-2026-73742 arubanetworks fabric composer A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to th...	4.3 Medium	—	0,25%	1 Sep 2026
CVE-2026-73741 arubanetworks fabric composer A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to view some system files. Successful exploitation c...	4.3 Medium	—	0,27%	1 Sep 2026
CVE-2026-73740 arubanetworks fabric composer A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user pri...	4.4 Medium	—	0,14%	1 Sep 2026
CVE-2026-73739 arubanetworks fabric composer A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleart...	4.4 Medium	—	0,16%	1 Sep 2026
CVE-2026-73738 arubanetworks fabric composer A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to view se...	4.7 Medium	—	0,12%	1 Sep 2026
CVE-2026-73737 arubanetworks fabric composer An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjac...	4.8 Medium	—	0,21%	1 Sep 2026
CVE-2026-73736 arubanetworks fabric composer A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successf...	5.3 Medium	—	0,42%	1 Sep 2026
CVE-2026-73735 arubanetworks fabric composer Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege le...	5.4 Medium	—	0,26%	1 Sep 2026
CVE-2026-73734 arubanetworks fabric composer A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to redirect users to an arbitrary U...	5.4 Medium	—	0,32%	1 Sep 2026
CVE-2026-73733 arubanetworks fabric composer Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication contro...	5.4 Medium	—	0,29%	1 Sep 2026
CVE-2026-73732 arubanetworks fabric composer A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain...	5.6 Medium	—	0,12%	1 Sep 2026
CVE-2026-73731 arubanetworks fabric composer A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site s...	6.1 Medium	—	0,33%	1 Sep 2026
CVE-2026-73730 arubanetworks fabric composer A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user...	6.5 Medium	—	0,30%	1 Sep 2026
CVE-2026-73729 arubanetworks fabric composer A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to upstrea...	6.5 Medium	—	0,13%	1 Sep 2026
CVE-2026-73728 arubanetworks fabric composer Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated low privilege operator user to cause a denial of se...	6.5 Medium	—	0,42%	1 Sep 2026
CVE-2026-73727 arubanetworks fabric composer Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploi...	6.5 Medium	—	0,34%	1 Sep 2026
CVE-2026-73726 arubanetworks fabric composer A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could potentially allow an unauthenticated adjacent actor to...	6.8 Medium	—	0,26%	1 Sep 2026
CVE-2026-73725 arubanetworks fabric composer A local privilege-escalation vulnerability has been discovered in HPE Networking Fabric Composer. Successful exploitation of this vulnerability could allow a local attack...	7.0 High	—	0,12%	1 Sep 2026
CVE-2026-73724 arubanetworks fabric composer Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user...	7.1 High	—	0,34%	1 Sep 2026
CVE-2026-73723 arubanetworks fabric composer A privilege escalation vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated...	7.1 High	—	0,37%	1 Sep 2026
CVE-2026-73722 arubanetworks fabric composer Command injection vulnerabilities in the web-based management interface of HPE Networking Fabric Composer could allow an authenticated remote attacker to perform command...	7.2 High	—	1,5%	1 Sep 2026
CVE-2026-73721 arubanetworks fabric composer Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to conduct SQL injection attacks against the HPE Networking Fabr...	7.2 High	—	0,53%	1 Sep 2026
CVE-2026-73720 arubanetworks fabric composer Insecure file operations in the API of HPE Networking Fabric Composer could allow an authenticated remote attacker to achieve remote code execution. Successful exploitati...	7.2 High	—	1,1%	1 Sep 2026
CVE-2026-73719 arubanetworks fabric composer An arbitrary file write vulnerability exists in the API of HPE Networking Fabric Composer and could allow an authenticated administrative user to escalate privileges. Suc...	7.2 High	—	0,65%	1 Sep 2026
CVE-2026-73718 arubanetworks fabric composer A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if...	7.4 High	—	0,23%	1 Sep 2026
CVE-2026-73717 arubanetworks fabric composer A command injection vulnerability exists in the web-based management interface of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to ru...	7.5 High	—	0,83%	1 Sep 2026
CVE-2026-73716 arubanetworks fabric composer A remote code execution vulnerability exists in the underlying operating system of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to r...	7.5 High	—	0,64%	1 Sep 2026
CVE-2026-73715 arubanetworks fabric composer A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation...	7.5 High	—	0,57%	1 Sep 2026
CVE-2026-73714 arubanetworks fabric composer A sensitive information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege o...	7.6 High	—	0,32%	1 Sep 2026
CVE-2026-73713 arubanetworks fabric composer Local privilege-escalation vulnerabilities have been discovered in HPE Networking Fabric Composer. Successful exploitation of these vulnerabilities could allow a local at...	7.8 High	—	0,15%	1 Sep 2026
CVE-2026-73712 arubanetworks fabric composer A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain pr...	8.1 High	—	0,64%	1 Sep 2026
CVE-2026-73711 arubanetworks fabric composer A privilege escalation vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker...	8.1 High	—	0,46%	1 Sep 2026
CVE-2026-73710 arubanetworks fabric composer Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful expl...	8.2 High	—	0,46%	1 Sep 2026
CVE-2026-73709 arubanetworks fabric composer A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to run arbitrary commands on the und...	8.3 High	—	0,33%	1 Sep 2026
CVE-2026-73708 arubanetworks fabric composer A business logic vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to ob...	8.3 High	—	0,42%	1 Sep 2026
CVE-2026-73707 arubanetworks fabric composer Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user...	8.5 High	—	0,34%	1 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.