Katalog CVE (hal. 610)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.271 (Critical 36.431 · High 105.570 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 30.451–30.500 dari 264.271 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-55622 Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the nam...	7.7 High	—	0,34%	21 Agt 2026
CVE-2026-55621 Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing th...	7.7 High	—	0,34%	21 Agt 2026
CVE-2026-50278 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a `CIccEmbedIO::Read8()` size_t underflow. The...	6.5 Medium	—	0,45%	21 Agt 2026
CVE-2026-48769 Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns...	9.9 Critical	—	0,73%	21 Agt 2026
CVE-2026-48756 Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateCustomVolumeFromBackup` in `internal/server/storage/backend.go` contain...	2.1 Low	—	0,38%	21 Agt 2026
CVE-2026-48755 Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injec...	9.9 Critical	—	0,73%	21 Agt 2026
CVE-2026-48754 Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).createDependentVolumesFromBackup` in `internal/server/storage/backend.go` con...	2.1 Low	—	0,38%	21 Agt 2026
CVE-2026-48753 Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of ar...	9.9 Critical	—	0,73%	21 Agt 2026
CVE-2026-48752 Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrar...	9.9 Critical	—	0,73%	21 Agt 2026
CVE-2026-48751 Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing fo...	9.9 Critical	—	0,64%	21 Agt 2026
CVE-2026-48750 Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output o...	9.9 Critical	—	0,73%	21 Agt 2026
CVE-2026-48749 Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host...	9.9 Critical	—	0,73%	21 Agt 2026
CVE-2026-47753 Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateInstanceFromBackup` in `internal/server/storage/backend.go` contains a...	4.4 Medium	—	0,15%	21 Agt 2026
CVE-2026-77806 SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-...	9.8 Critical	—	4,5%	21 Agt 2026
CVE-2026-75946 A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attac...	8.2 High	—	0,10%	21 Agt 2026
CVE-2026-15580 vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: b...	6.9 Medium	—	0,25%	21 Agt 2026
CVE-2026-77780 Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and acco...	5.3 Medium	—	0,44%	21 Agt 2026
CVE-2026-77028 Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66	5.3 Medium	—	0,41%	21 Agt 2026
CVE-2026-76613 Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own...	8.6 High	—	0,37%	21 Agt 2026
CVE-2026-76612 Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 - User supplied input in comments and user supplied field elements...	8.6 High	—	0,44%	21 Agt 2026
CVE-2026-76611 Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.	6.9 Medium	—	0,50%	21 Agt 2026
CVE-2026-75115 Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-b...	7.0 High	—	0,47%	21 Agt 2026
CVE-2026-59654 apache cloudstack Missing Release of Resource after Effective Lifetime vulnerability in Apache CloudStack's scoped global configuration functionality. It affects different modules and plug...	7.5 High	—	0,59%	21 Agt 2026
CVE-2026-77776 Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points in headroom/proxy/handlers/openai....	9.1 Critical	—	0,61%	21 Agt 2026
CVE-2026-77775 Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/o...	8.6 High	—	0,59%	21 Agt 2026
CVE-2026-77759 Authorization Bypass Through User-Controlled Key in the transaction API in Roskus Prospero Flow CRM 5.0.0 through 5.3.5 allows an authenticated user to read the transacti...	8.7 High	—	0,51%	21 Agt 2026
CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66	4.6 Medium	—	0,21%	21 Agt 2026
CVE-2026-59318 vmware spring ai In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched. Under ce...	9.8 Critical	—	0,25%	21 Agt 2026
CVE-2026-59308 vmware spring ai In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across...	4.3 Medium	—	0,22%	21 Agt 2026
CVE-2026-59279 vmware spring ai The MCP Streamable HTTP server transport (WebFlux and WebMvc variants) does not place any limit on the number of sessions it retains, and by default does not require clie...	7.5 High	—	0,55%	21 Agt 2026
CVE-2026-19848 The ProfilePress WordPress plugin before 4.17.1 does not strip shortcodes from two of its profile fields before rendering them on public pages, allowing unauthenticated a...	6.5 Medium	—	0,31%	21 Agt 2026
CVE-2026-18356 The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the acco...	3.7 Low	—	0,26%	21 Agt 2026
CVE-2026-17559 The Passster WordPress plugin before 4.3.9 does not correctly match its own public endpoint paths when deciding which REST API requests may bypass global password protect...	5.3 Medium	—	0,35%	21 Agt 2026
CVE-2026-16650 The Charitable WordPress plugin before 1.8.12 does not verify the authenticity of incoming Square payment webhook events in a default configuration, allowing unauthentica...	5.3 Medium	—	0,16%	21 Agt 2026
CVE-2026-15150 The myCred WordPress plugin before 3.2.5 does not verify that the receiver of an incoming payment gateway notification matches the site's configured merchant account, all...	5.3 Medium	—	0,16%	21 Agt 2026
CVE-2026-15046 The LitExtension WordPress plugin through 1.2.5 does not verify a nonce before an administrative action that overwrites the store-migration connector's authentication tok...	4.2 Medium	—	0,12%	21 Agt 2026
CVE-2026-13176 The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-leve...	2.7 Low	—	0,33%	21 Agt 2026
CVE-2026-77769 The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardId(dashboardId). The enforceAcce...	6.5 Medium	—	0,42%	21 Agt 2026
CVE-2026-77768 The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly. The enforceAccess middleware in pa...	6.5 Medium	—	0,42%	21 Agt 2026
CVE-2026-77767 Reconmap's API applies a fallback authorization policy in apps/api/app/Program.cs that requires an authenticated user holding the administrator role, so controllers witho...	7.5 High	—	0,46%	21 Agt 2026
CVE-2026-77763 The filestore backend in pkg/object/file.go, used for file:// stores and as a common juicefs sync destination, derived every operation's target from path(key), which retu...	6.5 Medium	—	0,50%	21 Agt 2026
CVE-2026-77761 A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generat...	6.3 Medium	—	0,61%	21 Agt 2026
CVE-2026-77686 A weakness has been identified in Dolibarr up to 23.0.4. This affects an unknown part of the file htdocs/user/card.php of the component Account Handler. This manipulation...	5.4 Medium	—	0,48%	21 Agt 2026
CVE-2026-77683 A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntp_time...	9.9 Critical	—	2,9%	21 Agt 2026
CVE-2026-77086 SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversa...	9.1 Critical	—	1,0%	21 Agt 2026
CVE-2026-59296 Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentati...	5.9 Medium	—	0,30%	21 Agt 2026
CVE-2026-15576 Improper authentication in the agent receiver of Checkmk <2.5.0p10 allows an unauthenticated remote attacker to bypass mutual TLS client certificate verification of relay...	6.9 Medium	—	0,45%	21 Agt 2026
CVE-2026-14208 Remote Utilities Host <=7.7.3.0 sets insecure ACLs on all DLL files in the installation directory (C:\Program Files (x86)\Remote Utilities - Host\), granting FULL CONTROL...	7.3 High	—	0,12%	21 Agt 2026
CVE-2026-77755 A denial-of-service vulnerability was identified in misp-stix when processing attacker-controlled STIX 1 or STIX 2 documents. The STIX import code used sys.exit() to han...	8.7 High	—	0,47%	21 Agt 2026
CVE-2026-77751 A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMI...	8.8 High	—	0,66%	21 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.