Katalog CVE (hal. 549)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.383 (Critical 36.349 · High 105.290 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 26 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 27.401–27.450 dari 263.383 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-81893 A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale si...	4.7 Medium	—	0,15%	27 Agt 2026
CVE-2026-81838 amazon diagram-as-code A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to write arbitra...	7.1 High	—	0,20%	27 Agt 2026
CVE-2026-81834 A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Handler. Exec...	6.3 Medium	—	0,40%	27 Agt 2026
CVE-2026-81833 A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of...	5.5 Medium	—	0,30%	27 Agt 2026
CVE-2026-81731 frappe Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description field of the Workspace Link doctype is declared wi...	5.4 Medium	—	0,30%	27 Agt 2026
CVE-2026-81730 dolibarr erp/crm Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers without reducing it to a safe basename. The global sav...	8.2 High	—	0,56%	27 Agt 2026
CVE-2026-81729 dolibarr erp/crm Dolibarr before 23.0.4 authorizes REST API document deletion against the wrong permission. Documents::delete() in htdocs/api/class/api_documents.class.php calls dol_check...	6.5 Medium	—	0,39%	27 Agt 2026
CVE-2026-81728 dolibarr erp/crm Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST('updatekeys', 'array') in htdocs/imports/...	8.1 High	—	0,44%	27 Agt 2026
CVE-2026-81530 mongodb c# driver A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to...	5.6 Medium	—	0,10%	27 Agt 2026
CVE-2026-81529 mongodb c# driver Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C# Driver. When an application passes untrusted tex...	7.1 High	—	0,29%	27 Agt 2026
CVE-2026-81528 Advisory mongodb c# driver A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is...	5.4 Medium	—	0,28%	27 Agt 2026
CVE-2026-81527 mongodb c# driver A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver, in both aggregation expression and query filter...	6.5 Medium	—	0,31%	27 Agt 2026
CVE-2026-81526 Advisory mongodb rust driver The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor...	6.5 Medium	—	0,40%	27 Agt 2026
CVE-2026-81525 Advisory mongodb php driver, mongodb php library The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target...	8.1 High	—	0,49%	27 Agt 2026
CVE-2026-81524 Advisory mongodb c driver A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver compose...	5.4 Medium	—	0,27%	27 Agt 2026
CVE-2026-81523 mongodb libmongocrypt A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitiz...	4.4 Medium	—	0,10%	27 Agt 2026
CVE-2026-81522 Advisory mongodb c++ driver A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that buil...	8.1 High	—	0,46%	27 Agt 2026
CVE-2026-81521 Advisory mongodb go driver The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before...	6.5 Medium	—	0,24%	27 Agt 2026
CVE-2026-77438 triliumnotes trilium Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public share-search endpoint does not enforce the per-note sh...	7.5 High	—	0,42%	27 Agt 2026
CVE-2026-76640 Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack that allow unauthenticated proximate at...	7.5 High	—	0,35%	27 Agt 2026
CVE-2026-76639 Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands...	8.8 High	—	0,67%	27 Agt 2026
CVE-2026-75889 Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitra...	7.7 High	—	0,22%	27 Agt 2026
CVE-2026-74820 ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in...	10.0 Critical	—	5,1%	27 Agt 2026
CVE-2026-6876 ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to ex...	10.0 Critical	—	0,62%	27 Agt 2026
CVE-2026-66353 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize_value/2 in lib/d...	5.3 Medium	—	0,54%	27 Agt 2026
CVE-2026-65931 LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. An authenticated user wit...	5.1 Medium	—	0,40%	27 Agt 2026
CVE-2026-59324 vmware spring integration When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, concurrent requests on the same FluxMessageChannel sub...	8.2 High	—	0,28%	27 Agt 2026
CVE-2026-59322 vmware spring integration The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it d...	6.3 Medium	—	0,29%	27 Agt 2026
CVE-2026-59321 vmware spring integration A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kt...	5.4 Medium	—	0,18%	27 Agt 2026
CVE-2026-59320 vmware spring advanced message queuing protocol When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. A...	6.5 Medium	—	0,42%	27 Agt 2026
CVE-2026-59319 vmware spring ai RedisChatMemoryRepository.findByMetadata() builds RediSearch tag and text queries from caller-supplied metadata values without applying RediSearchUtil.escape(), unlike ge...	4.3 Medium	—	0,30%	27 Agt 2026
CVE-2026-59317 vmware spring for apache kafka DeadLetterPublishingRecovererFactory reads the retry_topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigInteger(he...	6.5 Medium	—	0,42%	27 Agt 2026
CVE-2026-59316 Advisory broadcom spring authorization server Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft a...	8.2 High	—	0,32%	27 Agt 2026
CVE-2026-59315 vmware spring cloud config The Spring Cloud Config Monitor is susceptible to Denial of Service attacks via malicious payloads. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Sp...	5.3 Medium	—	0,40%	27 Agt 2026
CVE-2026-59314 vmware spring framework Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Spri...	3.7 Low	—	0,26%	27 Agt 2026
CVE-2026-59313 vmware spring framework Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE). Spring Framework 7.0.0 - 7.0.8 Spring...	9.8 Critical	—	0,56%	27 Agt 2026
CVE-2026-59311 vmware spring integration A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer as a symli...	6.8 Medium	—	0,39%	27 Agt 2026
CVE-2026-59307 vmware spring integration An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all when the store is a Spring-managed bean. Spring I...	8.0 High	—	0,42%	27 Agt 2026
CVE-2026-59306 vmware spring cloud stream Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4...	3.8 Low	—	0,23%	27 Agt 2026
CVE-2026-59305 vmware spring cloud stream Partition interceptor may be improperly added while sending message. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6	3.8 Low	—	0,21%	27 Agt 2026
CVE-2026-59304 vmware spring cloud stream Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 -...	3.8 Low	—	0,21%	27 Agt 2026
CVE-2026-59303 vmware spring cloud stream Dynamic destination cache size is not properly bound in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0...	3.8 Low	—	0,21%	27 Agt 2026
CVE-2026-59302 vmware spring cloud function Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6	4.9 Medium	—	0,23%	27 Agt 2026
CVE-2026-59301 vmware spring cloud function Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 -...	4.9 Medium	—	0,23%	27 Agt 2026
CVE-2026-59300 vmware spring cloud function Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4...	3.5 Low	—	0,21%	27 Agt 2026
CVE-2026-59299 vmware spring cloud function Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Fun...	3.5 Low	—	0,21%	27 Agt 2026
CVE-2026-59298 vmware spring cloud function Potential for improper filtering of HTTP headers in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4...	3.5 Low	—	0,23%	27 Agt 2026
CVE-2026-59297 vmware spring cloud function Implementation of isSecure() call of ServerlessHttpServletRequest does not verify the actual scheme. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3...	3.5 Low	—	0,13%	27 Agt 2026
CVE-2026-59294 vmware spring ai ResourceCacheService.getCacheName() builds the on-disk filename by appending the URI fragment verbatim, without stripping path separators or .. sequences, and passes the...	6.5 Medium	—	0,36%	27 Agt 2026
CVE-2026-59293 vmware spring integration Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate down to SMB1/CIFS, which lacks mandatory signing/encryption and is vulnerable to N...	6.6 Medium	—	0,24%	27 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.