Katalog CVE (hal. 625)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.331 (Critical 36.436 · High 105.591 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 31.201–31.250 dari 264.331 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-76333 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action with a cra...	7.1 High	—	0,33%	19 Agt 2026
CVE-2026-76332 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into opening a crafted link to Analytics...	7.1 High	—	0,33%	19 Agt 2026
CVE-2026-76331 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject Search Processing Langua...	8.1 High	—	0,40%	19 Agt 2026
CVE-2026-76330 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into opening a crafted link to Monitorin...	7.1 High	—	0,33%	19 Agt 2026
CVE-2026-76329 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick a user who holds the "admin" Splunk role into opening a crafte...	6.4 Medium	—	0,26%	19 Agt 2026
CVE-2026-76328 splunk In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Languag...	6.7 Medium	—	0,28%	19 Agt 2026
CVE-2026-76327 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, an unauthenticated user could...	6.4 Medium	—	0,26%	19 Agt 2026
CVE-2026-76326 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could store a dashboard view that run...	5.7 Medium	—	0,34%	19 Agt 2026
CVE-2026-76325 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious ui-tour knowledge object that mat...	7.3 High	—	0,36%	19 Agt 2026
CVE-2026-76324 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could create a malicious Splunk Web tour and cause arbitr...	5.4 Medium	—	0,30%	19 Agt 2026
CVE-2026-76323 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could bypass Search Processing Langua...	7.3 High	—	0,33%	19 Agt 2026
CVE-2026-76322 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "user" Splunk role could craft a Dashboard Studio dashboard that runs attacke...	8.0 High	—	0,32%	19 Agt 2026
CVE-2026-76321 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could inject arbitrary Search Processing Language (SPL) into requests that...	7.3 High	—	0,44%	19 Agt 2026
CVE-2026-76320 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could cause an authenticated user to run arbitrary Search Processing Langu...	6.5 Medium	—	0,29%	19 Agt 2026
CVE-2026-76319 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the fsh_manage capability could perform Remote Code Execu...	8.8 High	—	0,64%	19 Agt 2026
CVE-2026-76318 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could store a malicious script in an...	5.4 Medium	—	0,25%	19 Agt 2026
CVE-2026-76317 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could move files that the user accoun...	8.8 High	—	0,56%	19 Agt 2026
CVE-2026-76316 splunk In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing L...	8.8 High	—	0,51%	19 Agt 2026
CVE-2026-76315 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute arbitrary code on the S...	8.8 High	—	0,65%	19 Agt 2026
CVE-2026-76314 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (...	8.8 High	—	0,81%	19 Agt 2026
CVE-2026-76313 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (...	8.8 High	—	0,64%	19 Agt 2026
CVE-2026-76312 splunk In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who can read the Hypertext Markup Language (HTML) source of a page that em...	9.4 Critical	—	0,45%	19 Agt 2026
CVE-2026-76311 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for a...	9.4 Critical	—	0,45%	19 Agt 2026
CVE-2026-76310 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job...	9.4 Critical	—	0,45%	19 Agt 2026
CVE-2026-76309 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structur...	4.3 Medium	—	0,30%	19 Agt 2026
CVE-2026-76263 splunk In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete Splunk Processing Language version 2 (SPL...	5.4 Medium	—	0,29%	19 Agt 2026
CVE-2026-76262 splunk In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including ser...	7.5 High	—	0,50%	19 Agt 2026
CVE-2026-76261 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the...	6.5 Medium	—	0,29%	19 Agt 2026
CVE-2026-76260 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the rest_properties_get capability could read encrypted stored crede...	6.5 Medium	—	0,34%	19 Agt 2026
CVE-2026-76259 splunk In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port...	7.8 High	—	0,17%	19 Agt 2026
CVE-2026-76258 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who does not hold the...	6.5 Medium	—	0,34%	19 Agt 2026
CVE-2026-76257 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who holds a Splunk ro...	6.5 Medium	—	0,34%	19 Agt 2026
CVE-2026-76256 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the...	4.3 Medium	—	0,30%	19 Agt 2026
CVE-2026-76255 splunk In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" Splunk roles could trick another user into running...	7.3 High	—	0,29%	19 Agt 2026
CVE-2026-76254 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing L...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76253 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could run arbitrary Search Processing...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76252 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unaut...	6.1 Medium	—	0,26%	19 Agt 2026
CVE-2026-76251 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin" or "power" Splunk roles could cause the Splunk App for Splunk Observa...	7.1 High	—	0,29%	19 Agt 2026
CVE-2026-69550 microsoft windows app Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	19 Agt 2026
CVE-2026-63123 Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback return...	6.5 Medium	—	0,26%	19 Agt 2026
CVE-2026-59992 Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the...	5.4 Medium	—	0,38%	19 Agt 2026
CVE-2025-36398 ibm ds8900f firmware, ibm ds8a00 firmware IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's com...	5.4 Medium	—	0,26%	19 Agt 2026
CVE-2025-36255 ibm ds8900f firmware, ibm ds8a00 firmware IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged use...	8.8 High	—	0,36%	19 Agt 2026
CVE-2025-36254 ibm ds8900f firmware, ibm ds8a00 firmware IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to impro...	7.4 High	—	0,46%	19 Agt 2026
CVE-2026-76827 A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search dat...	6.8 Medium	—	0,53%	19 Agt 2026
CVE-2026-76584 A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the...	9.9 Critical	—	0,85%	19 Agt 2026
CVE-2026-76583 A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the...	7.4 High	—	1,8%	19 Agt 2026
CVE-2026-76582 A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a man...	7.4 High	—	1,8%	19 Agt 2026
CVE-2026-76576 A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/...	4.3 Medium	—	0,47%	19 Agt 2026
CVE-2026-76139 A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integ...	8.0 High	—	0,72%	19 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.