Katalog CVE (hal. 597)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.125 (Critical 36.415 · High 105.508 · KEV 1.758 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 29.801–29.850 dari 264.125 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-78378 Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SCAN...	6.9 Medium	—	0,45%	24 Agt 2026
CVE-2026-78376 A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.	8.8 High	—	0,38%	24 Agt 2026
CVE-2026-78372 RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauth...	9.2 Critical	—	0,67%	24 Agt 2026
CVE-2026-78370 RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to rema...	9.2 Critical	—	0,69%	24 Agt 2026
CVE-2026-78369 RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provides an administrative function for creating ne...	8.8 High	—	0,69%	24 Agt 2026
CVE-2026-78367 A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec() function in tools/rpmbuild.cc passes an attacke...	7.0 High	—	0,20%	24 Agt 2026
CVE-2026-78250 A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads...	4.3 Medium	—	0,57%	24 Agt 2026
CVE-2026-78248 A vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_setti...	7.3 High	—	0,43%	24 Agt 2026
CVE-2026-77995 Advisory Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0, OAuth Single Sign-On – OIDC SSO < 1.2.2, Login with Keycloak OAuth Sing...	10.0 Critical	—	0,41%	24 Agt 2026
CVE-2026-76847 act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, inclu...	8.8 High	—	0,35%	24 Agt 2026
CVE-2026-76845 adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the string form o...	6.5 Medium	—	0,17%	24 Agt 2026
CVE-2026-76844 zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the...	7.4 High	—	0,59%	24 Agt 2026
CVE-2026-76843 The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(mo...	7.8 High	—	0,38%	24 Agt 2026
CVE-2026-76842 The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL sur...	8.2 High	—	0,49%	24 Agt 2026
CVE-2026-76841 Xinference loads models with Hugging Face remote code execution unconditionally enabled, and before version 2.12.0 exposes no setting to disable it. Six loader call sites...	8.8 High	—	1,0%	24 Agt 2026
CVE-2026-76840 RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as ex...	9.6 Critical	—	0,43%	24 Agt 2026
CVE-2026-67602 phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an insecu...	9.1 Critical	—	0,64%	24 Agt 2026
CVE-2026-59568 Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute...	9.1 Critical	—	0,66%	24 Agt 2026
CVE-2026-59567 Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary c...	8.8 High	—	0,15%	24 Agt 2026
CVE-2026-59566 A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.	8.4 High	—	0,18%	24 Agt 2026
CVE-2026-59565 A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.	8.8 High	—	0,48%	24 Agt 2026
CVE-2026-59564 An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.	9.1 Critical	—	0,53%	24 Agt 2026
CVE-2026-30512 A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5. The vulnera...	7.8 High	—	0,17%	24 Agt 2026
CVE-2026-21751 HCL Hive is affected by a cryptographic primitive with a risky implementation which could allow an attacker unauthorized lateral compromise or widespread credential leaka...	7.4 High	—	0,21%	24 Agt 2026
CVE-2026-17033 An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL. The attacke...	6.8 Medium	—	0,22%	24 Agt 2026
CVE-2025-68833 HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources.	5.3 Medium	—	0,21%	24 Agt 2026
CVE-2026-78365 Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify anot...	9.3 Critical	—	0,51%	24 Agt 2026
CVE-2026-78247 A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=conf...	7.3 High	—	0,43%	24 Agt 2026
CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information (e.g., credential...	4.3 Medium	—	0,31%	24 Agt 2026
CVE-2026-21756 HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code direct...	7.2 High	—	0,46%	24 Agt 2026
CVE-2026-78323 A flaw was found in JSS (Java Security Services). The JSSTrustManager class does not verify NSS trust flags when validating CA certificates, allowing certificates present...	6.5 Medium	—	0,18%	24 Agt 2026
CVE-2026-78291 Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.	5.3 Medium	—	0,29%	24 Agt 2026
CVE-2026-78290 Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.	6.5 Medium	—	0,22%	24 Agt 2026
CVE-2026-78280 Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.	4.3 Medium	—	0,14%	24 Agt 2026
CVE-2026-78279 Unauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.	5.4 Medium	—	0,13%	24 Agt 2026
CVE-2026-78278 Subscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.	5.3 Medium	—	0,31%	24 Agt 2026
CVE-2026-78277 Subscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.	4.9 Medium	—	0,19%	24 Agt 2026
CVE-2026-78272 Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.	5.4 Medium	—	0,23%	24 Agt 2026
CVE-2026-78270 Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.	7.6 High	—	0,38%	24 Agt 2026
CVE-2026-78269 Contributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.	6.4 Medium	—	0,23%	24 Agt 2026
CVE-2026-78258 Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.	5.3 Medium	—	0,31%	24 Agt 2026
CVE-2026-78246 A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component...	7.3 High	—	0,43%	24 Agt 2026
CVE-2026-6017 Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the admini...	7.1 High	—	0,24%	24 Agt 2026
CVE-2026-66671 Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.	8.1 High	—	0,47%	24 Agt 2026
CVE-2026-66670 Unauthenticated Local File Inclusion in Måne <= 1.7 versions.	8.1 High	—	0,47%	24 Agt 2026
CVE-2026-66650 Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.	9.8 Critical	—	0,56%	24 Agt 2026
CVE-2026-66648 Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.	9.8 Critical	—	0,48%	24 Agt 2026
CVE-2026-66623 Unauthenticated Cross Site Scripting (XSS) in Social Media & Share Icons <= 2.9.9 versions.	7.1 High	—	0,25%	24 Agt 2026
CVE-2026-66610 Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.	7.1 High	—	0,25%	24 Agt 2026
CVE-2026-66599 Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.	7.1 High	—	0,25%	24 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.