Katalog CVE (hal. 602)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.125 (Critical 36.415 · High 105.508 · KEV 1.758 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 30.051–30.100 dari 264.125 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74624 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit...	7.5 High	—	0,48%	22 Agt 2026
CVE-2026-74621 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix sk_buff leak when the header checks reject a packet tcf_ct_handle_fragments()...	7.5 High	—	0,49%	22 Agt 2026
CVE-2026-74617 In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in dibs_dev_alloc() dibs->lock is initialised by dibs_dev_add(), but a d...	9.8 Critical	—	0,65%	22 Agt 2026
CVE-2026-74616 In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skb_shared_info tailroom xdpf_clone() clones broadcast copies into a...	9.8 Critical	—	0,51%	22 Agt 2026
CVE-2026-74615 In the Linux kernel, the following vulnerability has been resolved: vxlan: do not arm the ageing timer on a device that is down vxlan_changelink() arms vxlan->age_timer...	8.8 High	—	0,13%	22 Agt 2026
CVE-2026-74614 In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b ("vsock/virtio: add support for...	8.4 High	—	0,14%	22 Agt 2026
CVE-2026-74613 In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after teardown Commit b917507e5ad9 ("vsock/virtio: stop w...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74612 In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments thro...	10.0 Critical	—	0,49%	22 Agt 2026
CVE-2026-74611 In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic retry tls_decrypt_sg() advances msg->msg_iter wh...	9.8 Critical	—	0,46%	22 Agt 2026
CVE-2026-74610 In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpushed When the copy path in tls_sw_sendmsg_locked()...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74609 In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the node lock in tipc_node_link_down() tipc_node_link_down() caches the li...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74608 In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_channels() cifs_try_adding_channels() takes a tem...	9.8 Critical	—	0,48%	22 Agt 2026
CVE-2026-74607 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVM...	8.8 High	—	0,13%	22 Agt 2026
CVE-2026-74606 In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs_remove_rec() eventfs_remove_rec() recursively removes the chi...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74605 In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add memory barriers When an eventfs inode is freed, it...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74604 In the Linux kernel, the following vulnerability has been resolved: Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Revert commit 030a48b0f6ce ("thermal/driv...	8.4 High	—	0,14%	22 Agt 2026
CVE-2026-74603 In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix board ID over-read The EEPROM board ID is a fixed 13-byte field and is not guaranteed...	7.1 High	—	0,13%	22 Agt 2026
CVE-2026-74601 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current_context for safe per-CPU buffer swap The ring_buffer_swap_cpu() function cu...	7.8 High	—	0,14%	22 Agt 2026
CVE-2026-74598 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6_route_rcv() validates the Route Information...	7.5 High	—	0,43%	22 Agt 2026
CVE-2026-74597 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip6ip6_err() ip6ip6_err() clones an outer IPv6 ICMP error skb, pulls...	9.8 Critical	—	0,54%	22 Agt 2026
CVE-2026-74595 In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() fscrypt_ioctl_set_pol...	7.8 High	—	0,09%	22 Agt 2026
CVE-2026-74594 In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() psi_schedule_rtpoll_work() is called lockless...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74592 In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and path_trunca...	8.1 High	—	0,34%	22 Agt 2026
CVE-2026-74591 In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index before retrying In __filemap_add_folio()'s split-a-c...	9.8 Critical	—	0,65%	22 Agt 2026
CVE-2026-74590 In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions The BPF verifier and the dynptr abstracti...	7.8 High	—	0,13%	22 Agt 2026
CVE-2026-74589 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix sk_redir use-after-free in send verdict sk_psock_msg_verdict() takes a socket refe...	8.4 High	—	0,14%	22 Agt 2026
CVE-2026-74588 In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list it is queued on __sctp_outq_flush_rtx() moves a ga...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-74587 In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding outbound AS...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-74586 In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sctp_process_asconf_param() stores a newly added peer...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-4703 The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deseriali...	9.8 Critical	—	0,90%	22 Agt 2026
CVE-2026-77992 Advisory Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.	9.5 Critical	—	0,44%	22 Agt 2026
CVE-2026-77027 Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vecto...	8.6 High	—	0,44%	22 Agt 2026
CVE-2026-76609 Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.	6.9 Medium	—	0,41%	22 Agt 2026
CVE-2026-76608 Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access check...	6.9 Medium	—	0,41%	22 Agt 2026
CVE-2026-76607 Advisory Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.	10.0 Critical	—	0,41%	22 Agt 2026
CVE-2026-76606 Advisory Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.	10.0 Critical	—	0,50%	22 Agt 2026
CVE-2026-76605 Advisory Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2.	10.0 Critical	—	0,70%	22 Agt 2026
CVE-2026-76604 Advisory Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of us...	10.0 Critical	—	0,70%	22 Agt 2026
CVE-2026-76603 Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks,...	6.9 Medium	—	0,41%	22 Agt 2026
CVE-2026-76602 Advisory Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation,...	9.3 Critical	—	0,39%	22 Agt 2026
CVE-2026-76601 Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks.	6.9 Medium	—	0,41%	22 Agt 2026
CVE-2026-76600 Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks.	6.9 Medium	—	0,41%	22 Agt 2026
CVE-2026-76599 Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows...	8.7 High	—	0,41%	22 Agt 2026
CVE-2026-76598 Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model...	8.7 High	—	0,47%	22 Agt 2026
CVE-2026-76597 Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to u...	8.7 High	—	0,44%	22 Agt 2026
CVE-2026-76596 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET...	8.7 High	—	0,41%	22 Agt 2026
CVE-2026-76571 Advisory Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is...	9.3 Critical	—	0,42%	22 Agt 2026
CVE-2026-74584 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing to userspace bnxt_re_alloc_ucontext() allocates uctx-...	7.1 High	—	0,18%	22 Agt 2026
CVE-2026-70626 nltk NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root. The...	6.2 Medium	—	0,20%	22 Agt 2026
CVE-2026-68768 hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCB...	6.1 Medium	—	0,21%	22 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.