Katalog CVE (hal. 676)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.859 (Critical 36.491 · High 105.819 · KEV 1.762 · sejak 2020) · Pembaruan terakhir: 29 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 33.751–33.800 dari 264.859 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-45791 Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's user.update procedure in apps/dokploy/server/api/routers/user.ts updates account...	5.9 Medium	—	0,41%	17 Agt 2026
CVE-2026-45790 Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/orga...	8.0 High	—	0,42%	17 Agt 2026
CVE-2026-43795 apple safari, apple ipados +2 lainnya The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26....	4.3 Medium	—	0,58%	17 Agt 2026
CVE-2026-43794 apple safari, apple ipados +2 lainnya A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...	8.8 High	—	0,42%	17 Agt 2026
CVE-2026-43667 apple ipados, apple iphone os A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, vis...	6.5 Medium	—	0,42%	17 Agt 2026
CVE-2026-42163 Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This ap...	9.8 Critical	—	0,48%	17 Agt 2026
CVE-2026-28984 apple ipados, apple iphone os The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvO...	4.3 Medium	—	0,22%	17 Agt 2026
CVE-2026-11817 This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a...	5.3 Medium	—	0,35%	17 Agt 2026
CVE-2026-10080 mattermost server Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash th...	6.5 Medium	—	0,42%	17 Agt 2026
CVE-2026-75531 Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inser...	7.0 High	—	0,44%	17 Agt 2026
CVE-2026-75529 Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the subm...	6.9 Medium	—	0,44%	17 Agt 2026
CVE-2026-75483 powerlevel10k fails to neutralize control characters in the package.json version field when rendering the package prompt segment. Attackers can inject raw escape bytes in...	3.3 Low	—	0,17%	17 Agt 2026
CVE-2026-75482 SWE-agent's trajectory inspector (sweagent inspector), confirmed in v1.1.0, is an HTTP server that joins request paths to the trajectory directory in its /trajectory/ han...	7.5 High	—	0,76%	17 Agt 2026
CVE-2026-75481 SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service ac...	8.8 High	—	0,36%	17 Agt 2026
CVE-2026-75480 OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls, allowing authenticated users to read all co-tenant...	6.5 Medium	—	0,42%	17 Agt 2026
CVE-2026-75479 JimuReport contains an authentication bypass vulnerability in the report folder template listing endpoint that allows unauthenticated attackers to enumerate all reports a...	7.5 High	—	0,47%	17 Agt 2026
CVE-2026-75111 Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside...	7.5 High	—	0,57%	17 Agt 2026
CVE-2026-75110 MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=true) but the undocumented, defaultless INTERNAL_S...	9.8 Critical	—	0,66%	17 Agt 2026
CVE-2026-75109 Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' worklo...	7.1 High	—	0,30%	17 Agt 2026
CVE-2026-75108 Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints, allowing any authenticated user to probe and wake assets they...	5.4 Medium	—	0,29%	17 Agt 2026
CVE-2026-75106 OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes...	9.1 Critical	—	0,40%	17 Agt 2026
CVE-2026-75105 phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/temp_share/index.php and app/temp_s...	7.5 High	—	0,48%	17 Agt 2026
CVE-2026-75104 Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers c...	5.5 Medium	—	0,29%	17 Agt 2026
CVE-2026-75103 Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password. Attackers...	8.8 High	—	0,62%	17 Agt 2026
CVE-2026-73560 vllm vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformers_utils/processors/mimo_v2_omni.p...	6.5 Medium	—	0,41%	17 Agt 2026
CVE-2026-73410 Budibase is an open-source low-code platform. Prior to 3.40.0, packages/backend-core/src/utils/outboundFetch.ts pinned a validated address through a Node agent, but the R...	8.5 High	—	0,28%	17 Agt 2026
CVE-2026-71518 Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by...	7.5 High	—	0,51%	17 Agt 2026
CVE-2026-68765 hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module (module 34301) that allows attackers to corrup...	6.1 Medium	—	0,18%	17 Agt 2026
CVE-2026-67967 Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819	9.8 Critical	—	0,65%	17 Agt 2026
CVE-2026-67966 Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access.	9.8 Critical	—	0,59%	17 Agt 2026
CVE-2026-67965 An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function	9.8 Critical	—	0,86%	17 Agt 2026
CVE-2026-67926 An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module	9.8 Critical	—	0,86%	17 Agt 2026
CVE-2026-67925 Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload	6.1 Medium	—	0,36%	17 Agt 2026
CVE-2026-67917 zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality. The `azuracast:restore` command executes the `db.s...	9.8 Critical	—	0,59%	17 Agt 2026
CVE-2026-66795 A flaw was found in the managedcluster-import-controller. The Certificate Signing Request (CSR) auto-approval logic improperly validates incoming CSRs, specifically by no...	9.9 Critical	—	0,49%	17 Agt 2026
CVE-2026-65976 Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk:...	6.5 Medium	—	0,45%	17 Agt 2026
CVE-2026-65974 ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, limited authenticated users can cross a permission boundary in Frappe...	9.9 Critical	—	1,0%	17 Agt 2026
CVE-2026-65832 Deskflow is a keyboard and mouse sharing app. Prior to continuous build 1.26.0.299, a remote unauthenticated Deskflow server can send kMsgDSetOptions (DSOP) values to Ser...	8.2 High	—	0,55%	17 Agt 2026
CVE-2026-65822 ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.116.0 and 16.23.0, erpnext/selling/report/inactive_customers/inactive_customers.py accept...	7.6 High	—	0,46%	17 Agt 2026
CVE-2026-65640 WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Gho...	8.8 High	—	1,9%	17 Agt 2026
CVE-2026-64657 Budibase is an open-source low-code platform. Prior to 3.39.19, the PostgreSQL datasource connector in packages/server/src/integrations/postgres.ts interpolates the user-...	8.4 High	—	0,45%	17 Agt 2026
CVE-2026-63409 Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to ServerProxy...	8.2 High	—	0,45%	17 Agt 2026
CVE-2026-54356 Budibase is an open-source low-code platform. Prior to 3.41.3, POST /api/attachments/:datasourceId/url in packages/server/src/api/routes/static.ts and packages/server/src...	7.1 High	—	0,35%	17 Agt 2026
CVE-2026-54336 JumpServer is an open source bastion host and an operation and maintenance security audit system. From 4.8.0 until 4.10.17, an authenticated user with SFTP permission to...	5.4 Medium	—	0,34%	17 Agt 2026
CVE-2026-47698 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, lib/bridge.js and lib/setup-sandbox.js fail to block stacked indirection through Function.prototype.call ar...	9.8 Critical	—	0,97%	17 Agt 2026
CVE-2026-47686 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/setup-sandbox.js sanitizes SuppressedError.error, SuppressedError.suppressed, and...	9.9 Critical	—	0,58%	17 Agt 2026
CVE-2026-47683 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, the bufferAllocLimit enforcement in lib/setup-sandbox.js does not cover Buffer.concat(list, totalLength) or...	8.7 High	—	0,54%	17 Agt 2026
CVE-2026-44846 JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, a user with the users.invite_user permission can submi...	6.2 Medium	—	0,43%	17 Agt 2026
CVE-2026-44845 JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host manage...	6.7 Medium	—	0,74%	17 Agt 2026
CVE-2026-40506 OpenEMR before 8.2.0 contains a path traversal vulnerability in the standard_tables_manage.php interface where the db GET parameter is passed without validation to temp_d...	6.5 Medium	—	0,70%	17 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.