Katalog CVE (hal. 706)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.369 (Critical 36.560 · High 106.018 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 35.251–35.300 dari 265.369 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-63649 The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration director...	4.1 Medium	—	0,33%	14 Agt 2026
CVE-2026-73683 Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploitin...	8.1 High	—	0,76%	14 Agt 2026
CVE-2026-69414 microsoft malware protection engine Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".	7.8 High	—	1,4%	14 Agt 2026
CVE-2026-74248 OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization. By associating another project's QoS policy with an amphora, an authenticated u...	4.3 Medium	—	0,33%	14 Agt 2026
CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could en...	5.1 Medium	—	0,41%	14 Agt 2026
CVE-2026-67366 Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable witho...	5.3 Medium	—	0,21%	14 Agt 2026
CVE-2026-50523 microsoft powershell Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.	7.8 High	—	0,32%	14 Agt 2026
CVE-2026-73680 Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission t...	8.8 High	—	2,8%	14 Agt 2026
CVE-2026-71571 Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCag...	8.6 High	—	0,37%	14 Agt 2026
CVE-2026-67365 Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable...	9.2 Critical	—	0,39%	14 Agt 2026
CVE-2026-64887 Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.	7.0 High	—	0,16%	14 Agt 2026
CVE-2026-34492 External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.	7.0 High	—	0,43%	14 Agt 2026
CVE-2026-27871 Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63.	2.9 Low	—	0,27%	14 Agt 2026
CVE-2026-19910 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execut...	7.5 High	—	0,29%	14 Agt 2026
CVE-2026-19909 PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on...	7.5 High	—	0,50%	14 Agt 2026
CVE-2026-19908 PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify conf...	7.1 High	—	0,36%	14 Agt 2026
CVE-2026-18554 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricte...	7.5 High	—	0,85%	14 Agt 2026
CVE-2026-18178 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.	8.1 High	—	0,54%	14 Agt 2026
CVE-2026-17227 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used...	6.5 Medium	—	0,35%	14 Agt 2026
CVE-2026-17209 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.	5.4 Medium	—	0,36%	14 Agt 2026
CVE-2026-17186 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.	9.8 Critical	—	0,50%	14 Agt 2026
CVE-2026-17184 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.	9.8 Critical	—	0,80%	14 Agt 2026
CVE-2026-17182 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of requ...	9.8 Critical	—	0,73%	14 Agt 2026
CVE-2026-17181 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal.	8.6 High	—	0,55%	14 Agt 2026
CVE-2026-17179 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection.	6.5 Medium	—	3,1%	14 Agt 2026
CVE-2026-17177 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.	7.5 High	—	0,55%	14 Agt 2026
CVE-2026-17175 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.	6.5 Medium	—	0,52%	14 Agt 2026
CVE-2026-17173 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.	6.5 Medium	—	0,66%	14 Agt 2026
CVE-2026-17081 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.	7.5 High	—	0,55%	14 Agt 2026
CVE-2026-17079 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validat...	4.3 Medium	—	0,32%	14 Agt 2026
CVE-2026-16915 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.	7.5 High	—	0,85%	14 Agt 2026
CVE-2026-16905 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication.	6.5 Medium	—	0,46%	14 Agt 2026
CVE-2026-16879 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...	8.8 High	—	0,50%	14 Agt 2026
CVE-2026-16708 ibm db2 mirror for i IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration.	7.5 High	—	0,45%	14 Agt 2026
CVE-2026-73679 ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code b...	7.2 High	—	1,1%	14 Agt 2026
CVE-2026-73678 MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitra...	10.0 Critical	—	1,6%	14 Agt 2026
CVE-2026-50029 js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` i...	5.3 Medium	—	0,40%	14 Agt 2026
CVE-2026-50027 mcp-memory-service is a semantic memory layer for AI applications. Prior to 10.67.1, all HTTP routes under /api/documents/* in mcp-memory-service are served without any a...	9.8 Critical	—	0,96%	14 Agt 2026
CVE-2026-49457 erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVer...	9.1 Critical	—	0,25%	14 Agt 2026
CVE-2026-45699 Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copyd...	7.5 High	—	0,45%	14 Agt 2026
CVE-2026-19188 A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature access...	10.0 Critical	—	2,9%	14 Agt 2026
CVE-2026-18403 LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participan...	6.0 Medium	—	0,38%	14 Agt 2026
CVE-2025-7639 The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting...	7.1 High	—	0,57%	14 Agt 2026
CVE-2026-73850 Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php.	8.6 High	—	0,37%	14 Agt 2026
CVE-2026-73849 Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-ins...	9.8 Critical	—	0,73%	14 Agt 2026
CVE-2026-73847 Emlog is an open source website building system. In 2.6.26 and earlier, missing CSRF protection on the AI Assistant execute_tool action in admin/ai.php lets a remote unau...	6.8 Medium	—	0,22%	14 Agt 2026
CVE-2026-72970 microsoft edge chromium Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.	8.3 High	—	0,73%	14 Agt 2026
CVE-2026-63361 LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query param...	8.5 High	—	0,53%	14 Agt 2026
CVE-2026-49282 Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to the select...	5.1 Medium	—	0,18%	14 Agt 2026
CVE-2026-49263 Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the publ...	2.0 Low	—	0,17%	14 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.