Katalog CVE (hal. 627)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.414 (Critical 36.443 · High 105.610 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 31.301–31.350 dari 264.414 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-76316 splunk In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.9, and 9.4.14, an unauthenticated user who can reach the Splunk management port could store a Search Processing L...	8.8 High	—	0,51%	19 Agt 2026
CVE-2026-76315 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute arbitrary code on the S...	8.8 High	—	0,65%	19 Agt 2026
CVE-2026-76314 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (...	8.8 High	—	0,81%	19 Agt 2026
CVE-2026-76313 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could perform Remote Code Execution (...	8.8 High	—	0,64%	19 Agt 2026
CVE-2026-76312 splunk In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who can read the Hypertext Markup Language (HTML) source of a page that em...	9.4 Critical	—	0,45%	19 Agt 2026
CVE-2026-76311 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the dispatch archive for a...	9.4 Critical	—	0,45%	19 Agt 2026
CVE-2026-76310 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has an embedded report token could download the associated search job...	9.4 Critical	—	0,45%	19 Agt 2026
CVE-2026-76309 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a low-privileged user that does not hold the "admin" or "power" Splunk roles could inject Structur...	4.3 Medium	—	0,30%	19 Agt 2026
CVE-2026-76263 splunk In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete Splunk Processing Language version 2 (SPL...	5.4 Medium	—	0,29%	19 Agt 2026
CVE-2026-76262 splunk In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including ser...	7.5 High	—	0,50%	19 Agt 2026
CVE-2026-76261 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the...	6.5 Medium	—	0,29%	19 Agt 2026
CVE-2026-76260 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the rest_properties_get capability could read encrypted stored crede...	6.5 Medium	—	0,34%	19 Agt 2026
CVE-2026-76259 splunk In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port...	7.8 High	—	0,17%	19 Agt 2026
CVE-2026-76258 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who does not hold the...	6.5 Medium	—	0,34%	19 Agt 2026
CVE-2026-76257 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.10, 3.9.24, and 3.8.71, a user who holds a Splunk ro...	6.5 Medium	—	0,34%	19 Agt 2026
CVE-2026-76256 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the...	4.3 Medium	—	0,30%	19 Agt 2026
CVE-2026-76255 splunk In Splunk Enterprise versions below 10.4.1, 10.2.6, 10.0.8, and 9.4.13, a user who does not hold the "admin" or "power" Splunk roles could trick another user into running...	7.3 High	—	0,29%	19 Agt 2026
CVE-2026-76254 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could cause another user to dispatch arbitrary Search Processing L...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76253 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could run arbitrary Search Processing...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76252 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.13, an unauthenticated user who tricks another user into visiting a malicious web page could run unaut...	6.1 Medium	—	0,26%	19 Agt 2026
CVE-2026-76251 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user who does not hold the "admin" or "power" Splunk roles could cause the Splunk App for Splunk Observa...	7.1 High	—	0,29%	19 Agt 2026
CVE-2026-69550 microsoft windows app Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	19 Agt 2026
CVE-2026-63123 Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback return...	6.5 Medium	—	0,26%	19 Agt 2026
CVE-2026-59992 Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the...	5.4 Medium	—	0,38%	19 Agt 2026
CVE-2025-36398 ibm ds8900f firmware, ibm ds8a00 firmware IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to read or modify another user's com...	5.4 Medium	—	0,26%	19 Agt 2026
CVE-2025-36255 ibm ds8900f firmware, ibm ds8a00 firmware IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged use...	8.8 High	—	0,36%	19 Agt 2026
CVE-2025-36254 ibm ds8900f firmware, ibm ds8a00 firmware IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to impro...	7.4 High	—	0,46%	19 Agt 2026
CVE-2026-76827 A flaw was found in search-indexer. This vulnerability allows a registered and authenticated managed cluster to tamper with or delete another cluster's indexed search dat...	6.8 Medium	—	0,53%	19 Agt 2026
CVE-2026-76584 A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the...	9.9 Critical	—	0,85%	19 Agt 2026
CVE-2026-76583 A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the...	7.4 High	—	1,8%	19 Agt 2026
CVE-2026-76582 A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a man...	7.4 High	—	1,8%	19 Agt 2026
CVE-2026-76576 A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/...	4.3 Medium	—	0,47%	19 Agt 2026
CVE-2026-76139 A flaw was found in acm-operator-bundle. The build process for this component downloads and runs a script from a remote source without verifying its authenticity or integ...	8.0 High	—	0,72%	19 Agt 2026
CVE-2026-75616 tp-link archer c20 firmware An OS command injection vulnerability exists in the web management interface of Archer C20 v6 firmware when processing certain WAN-related configuration operations. An au...	6.8 Medium	—	2,8%	19 Agt 2026
CVE-2026-75596 netty Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors us...	7.5 High	—	0,37%	19 Agt 2026
CVE-2026-75595 netty Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the...	9.1 Critical	—	0,32%	19 Agt 2026
CVE-2026-75569 A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinni...	7.7 High	—	0,60%	19 Agt 2026
CVE-2026-75476 Tanium addressed a compression bomb vulnerability in Threat Response.	3.1 Low	—	0,29%	19 Agt 2026
CVE-2026-69222 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/filters/array.ts computes complexity from arr...	7.5 High	—	0,63%	19 Agt 2026
CVE-2026-68555 Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples wi...	6.5 Medium	—	0,53%	19 Agt 2026
CVE-2026-68554 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticate...	2.3 Low	—	0,19%	19 Agt 2026
CVE-2026-68553 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USER...	7.1 High	—	0,48%	19 Agt 2026
CVE-2026-68552 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body...	5.3 Medium	—	0,52%	19 Agt 2026
CVE-2026-62727 microsoft windows 10 1607, microsoft windows 10 1809 +11 lainnya Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileg...	7.0 High	—	0,20%	19 Agt 2026
CVE-2026-61556 LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 until 10.27.1, the strip_html filter in src/filters/html.ts can enter an...	8.7 High	—	0,52%	19 Agt 2026
CVE-2026-54743 Lemmy is a link aggregator and forum for the fediverse. Prior to lemmy-ui 0.19.19-beta.1, LemmyNet/lemmy-ui renders Markdown in src/shared/markdown.ts for post bodies, co...	6.4 Medium	—	0,55%	19 Agt 2026
CVE-2026-54741 Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-alpha.18, Lemmy blocks new private messages from a sender after the recipient blocks th...	5.3 Medium	—	0,48%	19 Agt 2026
CVE-2026-54740 Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-alpha.18, a lower-ranked remote moderator can remove a higher-ranked moderator by sendi...	6.5 Medium	—	0,43%	19 Agt 2026
CVE-2026-54739 Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, Lemmy's login endpoint in crates/api/api/src/local_user/login.rs returns differ...	6.9 Medium	—	0,59%	19 Agt 2026
CVE-2026-54738 Lemmy is a link aggregator and forum for the fediverse. Prior to 0.19.19 and 1.0.0-beta.1, actix-web ConnectionInfo::realip_remote_addr reads the first value of X-Forward...	6.5 Medium	—	0,56%	19 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.