Katalog CVE (hal. 623)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.331 (Critical 36.436 · High 105.591 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 31.101–31.150 dari 264.331 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-76923 wireshark Bluetooth HFP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,14%	19 Agt 2026
CVE-2026-76922 wireshark Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,14%	19 Agt 2026
CVE-2026-76921 wireshark CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,16%	19 Agt 2026
CVE-2026-76920 wireshark 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,13%	19 Agt 2026
CVE-2026-76919 wireshark ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	7.5 High	—	0,31%	19 Agt 2026
CVE-2026-76918 wireshark SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,14%	19 Agt 2026
CVE-2026-76917 wireshark Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,14%	19 Agt 2026
CVE-2026-76891 wireshark Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	6.5 Medium	—	0,22%	19 Agt 2026
CVE-2026-76890 wireshark Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	6.5 Medium	—	0,22%	19 Agt 2026
CVE-2026-76889 wireshark UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,13%	19 Agt 2026
CVE-2026-76888 wireshark RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	7.5 High	—	0,22%	19 Agt 2026
CVE-2026-76887 wireshark Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	6.5 Medium	—	0,18%	19 Agt 2026
CVE-2026-76886 wireshark C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	9.8 Critical	—	0,38%	19 Agt 2026
CVE-2026-76885 wireshark Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	6.5 Medium	—	0,22%	19 Agt 2026
CVE-2026-76884 wireshark ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	6.5 Medium	—	0,22%	19 Agt 2026
CVE-2026-76883 wireshark Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,13%	19 Agt 2026
CVE-2026-76882 wireshark Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,14%	19 Agt 2026
CVE-2026-76881 wireshark CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	5.5 Medium	—	0,14%	19 Agt 2026
CVE-2026-76880 wireshark RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	7.5 High	—	0,24%	19 Agt 2026
CVE-2026-76879 wireshark C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service	7.5 High	—	0,31%	19 Agt 2026
CVE-2026-76761 A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This affects the function shellExecCommand of the file core/engine.go of the component Management API. S...	7.3 High	—	2,1%	19 Agt 2026
CVE-2026-76760 A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected by this vulnerability is the function Authenticate of the file core/webhook.go. The manipulation of...	7.3 High	—	0,54%	19 Agt 2026
CVE-2026-76878 In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the...	8.4 High	—	0,54%	19 Agt 2026
CVE-2026-76850 LMDeploy deserializes disaggregated-serving peer messages with pickle. The handle_zmq_recv coroutine in lmdeploy/pytorch/disagg/conn/engine_conn.py reads peer-to-peer cac...	9.8 Critical	—	1,3%	19 Agt 2026
CVE-2026-76832 Agno's PythonTools in libs/agno/agno/tools/python.py contains a path traversal vulnerability that allows attackers to read, write, or execute arbitrary files by supplying...	8.8 High	—	1,3%	19 Agt 2026
CVE-2026-76591 A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of the file /cgi-bin/email.cgi of the component ssi....	7.4 High	—	1,8%	19 Agt 2026
CVE-2026-76590 A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ss...	9.9 Critical	—	0,85%	19 Agt 2026
CVE-2026-76589 A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results...	9.9 Critical	—	0,85%	19 Agt 2026
CVE-2026-76405 splunk on-call In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, a user who does not hold the "admin" or "power" Splunk roles could read a partially masked Applicat...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76404 splunk model context protocol server In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerabi...	9.1 Critical	—	0,75%	19 Agt 2026
CVE-2026-76403 splunk connect for kafka In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector whe...	7.4 High	—	0,24%	19 Agt 2026
CVE-2026-76402 splunk connect for kafka In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure a non...	8.2 High	—	0,41%	19 Agt 2026
CVE-2026-76401 splunk connect for kafka In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API could configure times...	5.9 Medium	—	0,38%	19 Agt 2026
CVE-2026-76400 splunk connect for kafka In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user who can reach the Kafka Connect Representational State Transfer (REST) API and influence respons...	5.9 Medium	—	0,38%	19 Agt 2026
CVE-2026-76399 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searches to run arbitrary Search Processing Langua...	8.1 High	—	0,35%	19 Agt 2026
CVE-2026-76398 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permis...	4.3 Medium	—	0,25%	19 Agt 2026
CVE-2026-76397 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associ...	8.1 High	—	0,35%	19 Agt 2026
CVE-2026-76396 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could cause a scheduled search to load and deserialize a model fil...	7.5 High	—	0,32%	19 Agt 2026
CVE-2026-76395 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could execute arbitrary code on the Splunk server by loading a model file containing c...	8.8 High	—	0,65%	19 Agt 2026
CVE-2026-76394 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a low-privileged user who does not hold the "admin" or "power" Splunk roles could start, stop, and configure containers, and re...	8.3 High	—	0,35%	19 Agt 2026
CVE-2026-76393 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for...	5.9 Medium	—	0,18%	19 Agt 2026
CVE-2026-76392 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could obtain predictable or default credentials for connected cont...	5.4 Medium	—	0,23%	19 Agt 2026
CVE-2026-76391 splunk ai toolkit In Splunk AI Toolkit versions below 6.0.0, a user who does not hold the "admin" or "power" Splunk roles could run searches with system-level privileges, access all releva...	8.3 High	—	0,47%	19 Agt 2026
CVE-2026-76390 cisco talos intelligence for enterprise security cloud In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web s...	5.3 Medium	—	0,39%	19 Agt 2026
CVE-2026-76389 cisco talos intelligence for enterprise security cloud In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, a user that holds a role with the get_talos_enrichment capability could send a crafted req...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76388 splunk enterprise security In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could change User and Entity Behavior Analytics (UEBA...	8.1 High	—	0,35%	19 Agt 2026
CVE-2026-76387 splunk enterprise security In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mc_investigation_read capability could inject Sea...	8.1 High	—	0,40%	19 Agt 2026
CVE-2026-76386 In versions below 3.2.2 of the Zoom app for Splunk SOAR, a user who holds a role with permission to run actions could expose meeting and personal meeting ID passwords by...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76385 In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission to run actions could expose keystore and private-key passwords by invok...	4.3 Medium	—	0,12%	19 Agt 2026
CVE-2026-76384 In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive p...	4.3 Medium	—	0,19%	19 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.