Katalog CVE (hal. 630)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.414 (Critical 36.443 · High 105.610 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 31.451–31.500 dari 264.414 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-16844 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS...	8.8 High	—	0,50%	19 Agt 2026
CVE-2026-16842 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS...	8.8 High	—	0,50%	19 Agt 2026
CVE-2026-16841 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.	8.8 High	—	0,41%	19 Agt 2026
CVE-2026-16840 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.	9.8 Critical	—	0,80%	19 Agt 2026
CVE-2026-16839 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser.	9.4 Critical	—	0,52%	19 Agt 2026
CVE-2026-16838 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-...	7.0 High	—	0,10%	19 Agt 2026
CVE-2026-16837 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to improper handling of a missing SSL client certificate.	7.5 High	—	0,35%	19 Agt 2026
CVE-2026-16836 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.	7.5 High	—	0,55%	19 Agt 2026
CVE-2026-16834 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow.	9.8 Critical	—	0,62%	19 Agt 2026
CVE-2026-16833 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read.	5.3 Medium	—	0,40%	19 Agt 2026
CVE-2026-16831 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.	7.5 High	—	0,55%	19 Agt 2026
CVE-2026-16829 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference.	5.3 Medium	—	0,25%	19 Agt 2026
CVE-2026-16827 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to the use of an uninitialized stack pointer.	5.9 Medium	—	0,44%	19 Agt 2026
CVE-2026-16825 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-b...	4.2 Medium	—	0,33%	19 Agt 2026
CVE-2026-16824 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to unbounded recursion.	7.5 High	—	0,55%	19 Agt 2026
CVE-2026-16822 ibm aix, ibm vios IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to impersonate the TNC policy server and modify traffic due to improper certificate validation...	9.3 Critical	—	0,25%	19 Agt 2026
CVE-2026-16724 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +15 lainnya IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Vi...	4.5 Medium	—	0,26%	19 Agt 2026
CVE-2026-16707 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service pr...	8.2 High	—	0,17%	19 Agt 2026
CVE-2026-16661 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service pr...	8.2 High	—	0,17%	19 Agt 2026
CVE-2026-75619 tp-link tapo c100 firmware, tp-link tapo c101 firmware Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP...	5.7 Medium	—	0,42%	19 Agt 2026
CVE-2026-75618 tp-link tapo c100 firmware, tp-link tapo c101 firmware Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause t...	6.5 Medium	—	0,38%	19 Agt 2026
CVE-2026-70496 A flaw was found in search-v2-operator. The operator's ClusterRole has permissions equivalent to a cluster administrator, allowing it to impersonate other entities, write...	9.9 Critical	—	0,55%	19 Agt 2026
CVE-2026-61807 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.2, a stored manufacturer or supplier name passed as the table component $name becomes data-selected-count-...	6.1 Medium	—	0,21%	19 Agt 2026
CVE-2026-55703 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.3, any activated account can request /maintenances/{id} and read maintenance records for assets in the sam...	4.3 Medium	—	0,34%	19 Agt 2026
CVE-2026-55694 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/{target_id}/eulas to obtain another user's randomized EULA...	6.5 Medium	—	0,29%	19 Agt 2026
CVE-2026-55643 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a company-scoped user in FMCS floater mode can access users whose company_id is null because broad API...	8.8 High	—	0,30%	19 Agt 2026
CVE-2026-55519 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an authenticated user with generic asset edit permission can delete files attached to assets outside th...	5.4 Medium	—	0,37%	19 Agt 2026
CVE-2026-55483 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.0, an authenticated user with users.create permission can submit the admin permission while creating a use...	8.8 High	—	0,35%	19 Agt 2026
CVE-2026-55482 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update() to submit compan...	6.3 Medium	—	0,33%	19 Agt 2026
CVE-2026-50550 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.5.0, a user who can edit other users can reset a superadmin's two-factor authentication through app/Http/Con...	6.3 Medium	—	0,27%	19 Agt 2026
CVE-2026-49976 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.1, a user with the import permission can use CSV update mode to overwrite the email address of a non-admin...	6.5 Medium	—	0,49%	19 Agt 2026
CVE-2026-49870 snipeitapp snipe-it Snipe-IT is an IT asset/license management system. Prior to 8.6.1, POST /two-factor has no rate limiting, lockout, or attempt counter, allowing an attacker with valid cre...	5.9 Medium	—	0,40%	19 Agt 2026
CVE-2026-19321 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +17 lainnya Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with servi...	6.7 Medium	—	0,16%	19 Agt 2026
CVE-2026-19198 Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.	8.7 High	—	0,30%	19 Agt 2026
CVE-2026-18848 ibm power system e1080 (9080-hex) firmware, ibm power system e1180 (9080-heu) firmware +7 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI w...	8.3 High	—	0,15%	19 Agt 2026
CVE-2026-18681 ibm power system s922 (9009-22g) firmware, ibm power system h922 (9223-22s) firmware +7 lainnya IBM Server Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP firmware...	6.8 Medium	—	0,34%	19 Agt 2026
CVE-2026-18315 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeov...	9.8 Critical	—	3,0%	19 Agt 2026
CVE-2026-17494 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +8 lainnya IBM Power Systems Firmware FW1120.00, and FW1110.00 through FW1110.30 is affected by a vulnerability in the interface between the BMC and the host system. An attacker wit...	8.2 High	—	0,17%	19 Agt 2026
CVE-2026-17429 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +27 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.0...	8.1 High	—	0,15%	19 Agt 2026
CVE-2026-17100 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +27 lainnya Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1, and OP940.00 - OP940.81...	8.2 High	—	0,17%	19 Agt 2026
CVE-2026-17093 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +27 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.0...	8.2 High	—	0,17%	19 Agt 2026
CVE-2026-16938 ibm power system e1080 (9080-hex) firmware, ibm power system e1180 (9080-heu) firmware +7 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in access con...	6.9 Medium	—	0,23%	19 Agt 2026
CVE-2026-16930 ibm power system e1180 (9080-heu) firmware, ibm power system s1122 (9824-22a) firmware +17 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and...	8.2 High	—	0,17%	19 Agt 2026
CVE-2026-16835 ibm power system e1080 (9080-hex) firmware, ibm power system e1180 (9080-heu) firmware +7 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP ma...	9.6 Critical	—	0,36%	19 Agt 2026
CVE-2026-16832 ibm power system e1080 (9080-hex) firmware, ibm power system e1180 (9080-heu) firmware +7 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the FSP ma...	8.4 High	—	0,32%	19 Agt 2026
CVE-2026-16828 ibm power system e1080 (9080-hex) firmware, ibm power system e1180 (9080-heu) firmware +7 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI w...	7.6 High	—	0,28%	19 Agt 2026
CVE-2026-16687 ibm power system e1180 (9080-heu) firmware, ibm power system e1080 (9080-hex) firmware +7 lainnya IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the ASMI...	9.6 Critical	—	0,35%	19 Agt 2026
CVE-2026-75149 Advisory marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a cra...	8.8 High	—	0,96%	19 Agt 2026
CVE-2026-73829 zenhive machine payments protocol Time-of-check Time-of-use (TOCTOU) Race Condition in ZenHive mpp allows an unauthenticated remote client to redeem one confirmed on-chain payment for multiple paid-resour...	3.7 Low	—	0,32%	19 Agt 2026
CVE-2026-73541 zenhive machine payments protocol Allocation of Resources Without Limits or Throttling in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet through concurrent sponsored pay...	8.2 High	—	0,59%	19 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.