Katalog CVE (hal. 69) — KUTIM-CSIRT

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 3.401–3.450 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-85976 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoi...	5.4 Medium	—	0,14%	12 Okt 2026
CVE-2026-85975 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-position...	7.5 High	—	0,18%	12 Okt 2026
CVE-2026-85974 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connecti...	7.4 High	—	0,14%	12 Okt 2026
CVE-2026-85973 Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could inter...	7.4 High	—	0,14%	12 Okt 2026
CVE-2026-85972 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in cert...	7.4 High	—	0,25%	12 Okt 2026
CVE-2026-85971 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which co...	7.1 High	—	0,10%	12 Okt 2026
CVE-2026-85970 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which cou...	7.1 High	—	0,27%	12 Okt 2026
CVE-2026-85969 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing function...	7.1 High	—	0,24%	12 Okt 2026
CVE-2026-85968 Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality. A remote authenticated attack...	7.1 High	—	0,27%	12 Okt 2026
CVE-2026-85967 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to e...	6.1 Medium	—	0,20%	12 Okt 2026
CVE-2026-85966 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information. A rem...	7.7 High	—	0,30%	12 Okt 2026
CVE-2026-85965 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result...	8.0 High	—	0,24%	12 Okt 2026
CVE-2026-85964 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileg...	7.7 High	—	0,39%	12 Okt 2026
CVE-2026-85963 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an una...	7.5 High	—	0,32%	12 Okt 2026
CVE-2026-85962 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments...	7.5 High	—	0,25%	12 Okt 2026
CVE-2026-85961 On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in di...	7.5 High	—	0,40%	12 Okt 2026
CVE-2026-85960 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authent...	7.5 High	—	0,15%	12 Okt 2026
CVE-2026-85959 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which cou...	7.5 High	—	0,32%	12 Okt 2026
CVE-2026-85958 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a...	7.5 High	—	0,29%	12 Okt 2026
CVE-2026-85957 Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintende...	7.5 High	—	0,32%	12 Okt 2026
CVE-2026-75888 A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted H...	7.7 High	—	0,21%	12 Okt 2026
CVE-2026-109374 ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerability in OIDC token exchange that allows end-user impersonators to impersonate administrators includin...	5.5 Medium	—	0,21%	12 Okt 2026
CVE-2026-109373 ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens...	8.1 High	—	0,42%	12 Okt 2026
CVE-2026-109372 ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature u...	8.7 High	—	0,37%	12 Okt 2026
CVE-2026-109371 ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-username handler acts on the account bound to a lo...	8.2 High	—	0,36%	12 Okt 2026
CVE-2026-109366 Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new...	3.7 Low	—	0,16%	12 Okt 2026
CVE-2026-109365 Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block...	3.7 Low	—	0,15%	12 Okt 2026
CVE-2026-109364 Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP...	5.3 Medium	—	0,24%	12 Okt 2026
CVE-2026-109363 ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction tr...	7.5 High	—	0,43%	12 Okt 2026
CVE-2026-109362 Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflo...	5.4 Medium	—	0,17%	12 Okt 2026
CVE-2026-109361 MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information....	7.3 High	—	0,23%	12 Okt 2026
CVE-2026-109360 MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched o...	7.5 High	—	0,45%	12 Okt 2026
CVE-2026-109359 Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest ge...	7.7 High	—	0,11%	12 Okt 2026
CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable (0666)....	7.8 High	—	0,11%	12 Okt 2026
CVE-2026-109357 LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filter...	8.1 High	—	0,46%	12 Okt 2026
CVE-2026-109356 LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users to physically delete ports without delete pr...	4.3 Medium	—	0,19%	12 Okt 2026
CVE-2026-109355 LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped. Atta...	6.1 Medium	—	0,19%	12 Okt 2026
CVE-2026-109354 LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting...	4.3 Medium	—	0,27%	12 Okt 2026
CVE-2026-109353 LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to noti...	7.1 High	—	0,25%	12 Okt 2026
CVE-2026-109352 LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr valu...	6.1 Medium	—	0,20%	12 Okt 2026
CVE-2026-109351 Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge pack-header...	6.5 Medium	—	0,32%	12 Okt 2026
CVE-2026-109350 Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA...	6.5 Medium	—	0,27%	12 Okt 2026
CVE-2026-109349 gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but a release-enabled as...	6.5 Medium	—	0,27%	12 Okt 2026
CVE-2026-109348 Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes....	4.3 Medium	—	0,25%	12 Okt 2026
CVE-2026-109347 Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing stat...	7.2 High	—	0,65%	12 Okt 2026
CVE-2026-109346 better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting c...	8.1 High	—	0,28%	12 Okt 2026
CVE-2026-109345 DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because IN_PLACE mode returns a force-removed style ele...	6.1 Medium	—	0,20%	12 Okt 2026
CVE-2026-109344 DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vulnerability because IN_PLACE mode fails to neutralize subtrees detached by afterSanitizeElements or...	6.1 Medium	—	0,19%	12 Okt 2026
CVE-2026-109343 SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQL USE statement switches a session to any namespace/database without checking that the caller's auth...	8.1 High	—	0,26%	12 Okt 2026
CVE-2026-109342 SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-privileged or unauthenticated callers to invali...	5.4 Medium	—	0,28%	12 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.