Katalog CVE (hal. 714)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.369 (Critical 36.560 · High 106.018 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 35.651–35.700 dari 265.369 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-73645 OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM. Prior to 0.3.1, the ERC7984 contract tracked confidential to...	6.6 Medium	—	0,52%	13 Agt 2026
CVE-2026-73644 OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extens...	9.6 Critical	—	0,41%	13 Agt 2026
CVE-2026-73643 js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load() or loadAl...	7.5 High	—	0,49%	13 Agt 2026
CVE-2026-73569 fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until 5.10.1, src/xmlparser/OrderedObjParser.js processe...	8.7 High	—	0,51%	13 Agt 2026
CVE-2026-73568 py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_incoming() method in libp2p/stream_muxer/yamux/yamux.py read...	7.5 High	—	0,49%	13 Agt 2026
CVE-2026-73567 sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex()...	9.1 Critical	—	0,44%	13 Agt 2026
CVE-2026-73566 node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive ent...	7.5 High	—	0,53%	13 Agt 2026
CVE-2026-73565 @hono/node-server allows running the Hono application on Node.js. From 2.0.0 until 2.0.10, a WebSocket upgrade request to an upgradeWebSocket route with a missing or malf...	5.3 Medium	—	0,53%	13 Agt 2026
CVE-2026-73564 frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacke...	8.7 High	—	0,52%	13 Agt 2026
CVE-2026-73563 linuxfoundation backstage/plugin-auth-backend Backstage is an open framework for building developer portals. Prior to 0.29.2, the experimental dynamic client registration and client ID metadata document features in t...	6.1 Medium	—	0,17%	13 Agt 2026
CVE-2026-73562 Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and 9.7.2, passing a user-controlled update...	6.5 Medium	—	0,50%	13 Agt 2026
CVE-2026-73561 Hub is a Node.js WebSocket server and client with added features. Prior to 0.2.16, every incoming unauthenticated WebSocket connection triggers loadDefaultConnectionEvent...	7.5 High	—	0,61%	13 Agt 2026
CVE-2026-72741 Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise res...	8.1 High	—	0,26%	13 Agt 2026
CVE-2026-67614 CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid...	9.8 Critical	—	0,96%	13 Agt 2026
CVE-2026-67613 CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying u...	4.9 Medium	—	0,50%	13 Agt 2026
CVE-2026-19730 The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE\|O_WRONLY but omits O_TRUNC. When the initial reflink copy attempt fails (...	4.2 Medium	—	0,13%	13 Agt 2026
CVE-2026-18428 A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arb...	8.8 High	—	1,00%	13 Agt 2026
CVE-2026-12236 The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server...	6.5 Medium	—	0,16%	13 Agt 2026
CVE-2024-58374 Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protecte...	7.5 High	—	0,75%	13 Agt 2026
CVE-2019-25765 ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id...	7.5 High	—	0,74%	13 Agt 2026
CVE-2026-73266 A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating ClusterCla...	7.1 High	—	0,35%	13 Agt 2026
CVE-2026-59765 SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata	7.5 High	—	0,37%	13 Agt 2026
CVE-2026-59763 Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads	4.3 Medium	—	0,29%	13 Agt 2026
CVE-2026-59109 SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices. When importing a received e-invoice (UBL/P...	8.8 High	—	0,39%	13 Agt 2026
CVE-2026-58511 Webhook Authorization Header Returned in Plaintext via API	2.7 Low	—	0,39%	13 Agt 2026
CVE-2026-58510 GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private	4.3 Medium	—	0,33%	13 Agt 2026
CVE-2026-58508 Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)	9.1 Critical	—	0,48%	13 Agt 2026
CVE-2026-58507 Private Repository Existence Disclosure via go-get Meta Endpoint	5.3 Medium	—	0,38%	13 Agt 2026
CVE-2026-58445 Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API	2.7 Low	—	0,37%	13 Agt 2026
CVE-2026-58444 Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents	4.3 Medium	—	0,36%	13 Agt 2026
CVE-2026-58443 Public-only repository tokens can update private PR head branches	9.1 Critical	—	0,58%	13 Agt 2026
CVE-2026-58442 Repository migration SSRF via multi-answer DNS allow-list bypass	6.5 Medium	—	0,43%	13 Agt 2026
CVE-2026-58441 SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL	6.3 Medium	—	0,17%	13 Agt 2026
CVE-2026-58440 Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup...	6.8 Medium	—	0,48%	13 Agt 2026
CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag	8.1 High	—	0,53%	13 Agt 2026
CVE-2026-58438 Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access	7.5 High	—	0,47%	13 Agt 2026
CVE-2026-58437 Repository Visibility Manipulation via Git Push Options	7.1 High	—	0,34%	13 Agt 2026
CVE-2026-58436 ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests	7.5 High	—	0,61%	13 Agt 2026
CVE-2026-58435 Gitea LFS Deploy-Key Privilege Escalation	5.4 Medium	—	0,29%	13 Agt 2026
CVE-2026-58434 Private Repository Metadata Remains Accessible After Access Revocation	7.5 High	—	0,47%	13 Agt 2026
CVE-2026-58433 Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting	9.1 Critical	—	0,51%	13 Agt 2026
CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information...	5.9 Medium	—	0,43%	13 Agt 2026
CVE-2026-58431 Public-only API token restriction is not enforced on team API routes	4.3 Medium	—	0,33%	13 Agt 2026
CVE-2026-58429 Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints	4.9 Medium	—	0,47%	13 Agt 2026
CVE-2026-58428 Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)	6.5 Medium	—	0,46%	13 Agt 2026
CVE-2026-58427 Private org member list leaked via /members API endpoint — incomplete fix for PR #38145	7.5 High	—	0,47%	13 Agt 2026
CVE-2026-58425 OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)	4.3 Medium	—	0,33%	13 Agt 2026
CVE-2026-58420 Local File Inclusion via file:// URI in Migration Restore	4.4 Medium	—	0,47%	13 Agt 2026
CVE-2026-58417 REST API exposes organization membership of private organizations to public	7.5 High	—	0,47%	13 Agt 2026
CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)	7.1 High	—	0,31%	13 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.