Katalog CVE (hal. 521)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.288 (Critical 36.348 · High 105.269 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 25 Okt 2026, 12:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 26.001–26.050 dari 263.288 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-84232 A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served with their original content type (e.g., text/html for...	5.4 Medium	—	0,24%	1 Sep 2026
CVE-2026-84207 Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attacker...	5.4 Medium	—	0,35%	1 Sep 2026
CVE-2026-84206 snipeitapp snipe-it Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allowing users without delete rights to restore soft-d...	4.3 Medium	—	0,38%	1 Sep 2026
CVE-2026-84205 GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identif...	6.5 Medium	—	0,42%	1 Sep 2026
CVE-2026-84204 GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page access permissions. Authenticated attackers can ret...	6.5 Medium	—	0,42%	1 Sep 2026
CVE-2026-84203 Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a s...	8.1 High	—	0,45%	1 Sep 2026
CVE-2026-84202 ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can c...	8.8 High	—	0,68%	1 Sep 2026
CVE-2026-84201 appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, allowing attackers to write files outside the in...	7.1 High	—	0,19%	1 Sep 2026
CVE-2026-84153 A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbo...	6.3 Medium	—	0,32%	1 Sep 2026
CVE-2026-79687 dell powerstoreos Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this...	10.0 Critical	—	0,29%	1 Sep 2026
CVE-2026-79682 dell powerstoreos Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrar...	8.8 High	—	0,75%	1 Sep 2026
CVE-2026-61779 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61778 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61777 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61776 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61775 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61774 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61773 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61772 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61771 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61770 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61769 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61768 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61767 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61766 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61765 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61764 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61763 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61762 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61761 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61760 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61759 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61758 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61757 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61756 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61755 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61754 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61753 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,54%	1 Sep 2026
CVE-2026-61752 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61751 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-61750 nvidia nemo megatron bridge NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead t...	7.8 High	—	0,41%	1 Sep 2026
CVE-2026-58567 dell powerstoreos Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbi...	8.8 High	—	0,75%	1 Sep 2026
CVE-2026-51770 Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forward attacker-controlled QoS se...	9.8 Critical	—	0,64%	1 Sep 2026
CVE-2026-51769 Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to restart the cloud update check wo...	9.8 Critical	—	0,64%	1 Sep 2026
CVE-2026-51768 Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify privileged QoS policy on the ma...	7.5 High	—	0,47%	1 Sep 2026
CVE-2026-51767 Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset pairing state and reboot the devi...	9.8 Critical	—	0,64%	1 Sep 2026
CVE-2026-49329 A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAc...	7.5 High	—	0,71%	1 Sep 2026
CVE-2026-18931 Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data....	9.1 Critical	—	0,23%	1 Sep 2026
CVE-2026-10195 The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFm...	8.8 High	—	0,57%	1 Sep 2026
CVE-2026-84233 A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax. When a user or automated workflow invokes `rpmunco...	7.0 High	—	0,19%	1 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.