Katalog CVE (hal. 584)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.973 (Critical 36.402 · High 105.447 · KEV 1.756 · sejak 2020) · Pembaruan terakhir: 27 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 29.151–29.200 dari 263.973 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-45018 Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled se...	9.8 Critical	—	1,1%	25 Agt 2026
CVE-2026-43670 apple safari, apple ipados +2 lainnya A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 2...	8.8 High	—	0,23%	25 Agt 2026
CVE-2026-43657 apple iphone os A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps.	3.3 Low	—	0,14%	25 Agt 2026
CVE-2026-80050 ContiNew Admin fails to apply file-upload permission checks or file-type allowlist validation to multipart upload endpoints, allowing authenticated users to store files w...	6.5 Medium	—	0,30%	25 Agt 2026
CVE-2026-80049 Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out...	8.8 High	—	0,44%	25 Agt 2026
CVE-2026-79788 In Dradis Community Edition, the ProvidersController and AgentsController gate their admin_required before_action on `defined?(Dradis::Pro)`, a constant that is never def...	7.1 High	—	0,40%	25 Agt 2026
CVE-2026-79787 Alluxio's S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attack...	9.8 Critical	—	0,46%	25 Agt 2026
CVE-2026-79786 Coroot's unauthenticated MCP OAuth dynamic client registration endpoint accepts any syntactically valid redirect URI without validation, allowing attackers to register cl...	7.1 High	—	0,39%	25 Agt 2026
CVE-2026-78379 Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary...	8.1 High	—	0,58%	25 Agt 2026
CVE-2026-65979 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ...	6.7 Medium	—	0,18%	25 Agt 2026
CVE-2026-62986 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and...	4.3 Medium	—	0,38%	25 Agt 2026
CVE-2026-61555 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 thro...	5.5 Medium	—	0,17%	25 Agt 2026
CVE-2026-59985 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3...	5.5 Medium	—	0,17%	25 Agt 2026
CVE-2026-55663 mediasoup is a WebRTC video conferencing system. From version 3.20.0 until 3.20.6 for the npm package and from 0.22.0 until 0.22.5 for the Rust crate, mediasoup's built-i...	5.6 Medium	—	0,19%	25 Agt 2026
CVE-2026-55620 eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_pars...	7.5 High	—	0,63%	25 Agt 2026
CVE-2026-55619 eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_pars...	5.3 Medium	—	0,52%	25 Agt 2026
CVE-2026-55618 eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the clea...	6.5 Medium	—	0,52%	25 Agt 2026
CVE-2026-55609 sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and su...	7.1 High	—	0,17%	25 Agt 2026
CVE-2026-80051 github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type. The built-in coerceString and coerc...	5.9 Medium	—	0,18%	25 Agt 2026
CVE-2026-79992 A flaw was found in Emacs TRAMP. A local attacker could exploit this vulnerability by processing maliciously crafted filenames. This occurs because TRAMP concatenates log...	7.8 High	—	0,22%	25 Agt 2026
CVE-2026-76198 Advisory adobe c2pa, adobe c2patool CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerabil...	5.5 Medium	—	0,26%	25 Agt 2026
CVE-2026-76197 Advisory adobe campaign Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result...	10.0 Critical	—	3,5%	25 Agt 2026
CVE-2026-76195 Advisory adobe campaign Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result...	10.0 Critical	—	3,5%	25 Agt 2026
CVE-2026-76193 Advisory adobe campaign Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current...	10.0 Critical	—	1,3%	25 Agt 2026
CVE-2026-76189 Advisory adobe c2pa, adobe c2patool CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could ex...	6.2 Medium	—	0,26%	25 Agt 2026
CVE-2026-75770 Advisory adobe substance 3d painter Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...	7.8 High	—	0,26%	25 Agt 2026
CVE-2026-75769 Advisory adobe substance 3d painter Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-75768 Advisory adobe substance 3d painter Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker...	7.8 High	—	0,29%	25 Agt 2026
CVE-2026-75767 Advisory adobe substance 3d painter Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-75766 Advisory adobe substance 3d painter Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-75752 Advisory adobe substance 3d painter Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...	5.5 Medium	—	0,26%	25 Agt 2026
CVE-2026-75750 Advisory adobe substance 3d painter Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-75749 Advisory adobe substance 3d painter Substance3D - Painter is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...	7.8 High	—	0,26%	25 Agt 2026
CVE-2026-71564 Advisory adobe substance 3d designer Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...	7.8 High	—	0,26%	25 Agt 2026
CVE-2026-71444 Advisory adobe c2pa, adobe c2patool CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could ex...	6.2 Medium	—	0,26%	25 Agt 2026
CVE-2026-71443 Advisory adobe c2pa, adobe c2patool CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vu...	7.5 High	—	0,93%	25 Agt 2026
CVE-2026-71442 Advisory adobe c2pa, adobe c2patool CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could ex...	7.5 High	—	0,90%	25 Agt 2026
CVE-2026-71441 Advisory adobe illustrator Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos...	5.5 Medium	—	0,26%	25 Agt 2026
CVE-2026-71399 Advisory adobe xd Adobe XD is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this v...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-71382 Advisory adobe substance 3d sampler Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o...	7.8 High	—	0,26%	25 Agt 2026
CVE-2026-71360 Advisory adobe c2pa, adobe c2patool CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...	7.5 High	—	0,90%	25 Agt 2026
CVE-2026-59984 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3...	5.5 Medium	—	0,17%	25 Agt 2026
CVE-2026-59983 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 thro...	5.5 Medium	—	0,17%	25 Agt 2026
CVE-2026-59982 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 thro...	7.1 High	—	0,31%	25 Agt 2026
CVE-2026-55637 genieacs-mcp is an MCP server for GenieACS written in Go. Prior to 0.3.2, the Streamable HTTP transport in cmd/server/main.go creates an unauthenticated /mcp listener on...	8.8 High	—	0,26%	25 Agt 2026
CVE-2026-55419 Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the upload_s...	5.3 Medium	—	0,48%	25 Agt 2026
CVE-2026-48433 Advisory adobe substance 3d designer Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-48432 Advisory adobe substance 3d designer Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-48431 Advisory adobe substance 3d designer Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,34%	25 Agt 2026
CVE-2026-48430 Advisory adobe substance 3d designer Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...	7.8 High	—	0,34%	25 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.