Katalog CVE (hal. 762)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.139 (Critical 36.631 · High 106.324 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 31 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 38.051–38.100 dari 266.139 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72694 A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (...	7.1 High	—	0,14%	11 Agt 2026
CVE-2026-72693 `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context. In the documented `kbrequest`/init usage,...	7.8 High	—	0,11%	11 Agt 2026
CVE-2026-71218 A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function, which accepts a peer-controlled message length an...	5.3 Medium	—	0,38%	11 Agt 2026
CVE-2026-71217 A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON with oversized numeric parameters, such as `parallel`...	7.5 High	—	0,64%	11 Agt 2026
CVE-2026-15567 A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field wit...	7.5 High	—	1,0%	11 Agt 2026
CVE-2026-15565 A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage...	7.5 High	—	1,2%	11 Agt 2026
CVE-2026-15563 A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding th...	7.4 High	—	0,66%	11 Agt 2026
CVE-2026-15562 A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can...	7.5 High	—	1,0%	11 Agt 2026
CVE-2026-15561 A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to dri...	7.5 High	—	0,85%	11 Agt 2026
CVE-2026-15560 when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated atta...	8.1 High	—	0,77%	11 Agt 2026
CVE-2026-15556 A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a...	8.1 High	—	0,33%	11 Agt 2026
CVE-2026-15555 A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no c...	8.8 High	—	0,95%	11 Agt 2026
CVE-2026-15554 the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker w...	7.4 High	—	0,57%	11 Agt 2026
CVE-2026-10579 A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed...	9.8 Critical	—	0,46%	11 Agt 2026
CVE-2026-73156 Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate direc...	5.3 Medium	—	0,44%	11 Agt 2026
CVE-2026-73155 Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to vie...	5.3 Medium	—	0,35%	11 Agt 2026
CVE-2026-73140 Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters c...	5.3 Medium	—	0,35%	11 Agt 2026
CVE-2026-19519 A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked type assertion to panic the scanner. The panic is...	4.3 Medium	—	0,37%	11 Agt 2026
CVE-2026-19418 The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Instal...	7.3 High	—	0,24%	11 Agt 2026
CVE-2026-19518 samsung rlottie Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.	6.5 Medium	—	0,36%	11 Agt 2026
CVE-2026-19517 samsung rlottie Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive...	6.5 Medium	—	0,36%	11 Agt 2026
CVE-2026-19391 A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP b...	6.5 Medium	—	0,24%	11 Agt 2026
CVE-2026-16053 Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup mo...	8.5 High	—	1,8%	11 Agt 2026
CVE-2026-8158 The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the tools use...	5.3 Medium	—	0,29%	11 Agt 2026
CVE-2026-6505 The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be e...	5.1 Medium	—	0,09%	11 Agt 2026
CVE-2026-6181 The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service a...	5.9 Medium	—	0,39%	11 Agt 2026
CVE-2026-5304 An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is co...	5.7 Medium	—	0,31%	11 Agt 2026
CVE-2026-5303 The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation. This vulnerability can only be e...	5.7 Medium	—	0,23%	11 Agt 2026
CVE-2026-4757 A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be exploited after...	7.2 High	—	0,57%	11 Agt 2026
CVE-2026-19516 A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose t...	9.1 Critical	—	0,31%	11 Agt 2026
CVE-2026-18348 Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbou...	4.1 Medium	—	0,34%	11 Agt 2026
CVE-2026-14549 The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user,...	4.3 Medium	—	0,25%	11 Agt 2026
CVE-2026-14548 The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user,...	6.5 Medium	—	0,30%	11 Agt 2026
CVE-2026-13716 craftycontrol crafty controller Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Cr...	9.1 Critical	—	0,80%	11 Agt 2026
CVE-2026-12052 The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.c builds a fixed-size response for the GET_NTB_PAR...	5.2 Medium	—	0,27%	11 Agt 2026
CVE-2026-12051 The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer dereference in handle_download() (subsys/usb/device_n...	4.6 Medium	—	0,23%	11 Agt 2026
CVE-2026-11894 The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the bt_hci_driver_api buffer-ownership contract. That...	5.9 Medium	—	0,25%	11 Agt 2026
CVE-2026-19425 Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands t...	9.8 Critical	—	0,64%	11 Agt 2026
CVE-2026-16974 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post_meta Shortcode in all versi...	6.4 Medium	—	0,26%	11 Agt 2026
CVE-2026-11985 On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choice, which defaults to CONFIG_FP_HARDABI. Both FP_HARDABI and FP_SOFTABI...	3.6 Low	—	0,13%	11 Agt 2026
CVE-2026-11893 The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetooth/hci/hci_bflb.c, violates the bt_hci_driver_api....	5.9 Medium	—	0,25%	11 Agt 2026
CVE-2026-8917 Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arb...	8.4 High	—	0,15%	11 Agt 2026
CVE-2026-24330 A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This...	6.5 Medium	—	0,52%	11 Agt 2026
CVE-2026-24329 A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the Management...	4.9 Medium	—	0,60%	11 Agt 2026
CVE-2026-19424 Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to r...	7.5 High	—	0,51%	11 Agt 2026
CVE-2026-66779 Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make it publicly...	6.3 Medium	—	0,35%	11 Agt 2026
CVE-2026-66778 sap approuter SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially...	5.3 Medium	—	0,36%	11 Agt 2026
CVE-2026-66777 sap approuter SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. Due to the complexity of the required conditions, a...	5.9 Medium	—	0,44%	11 Agt 2026
CVE-2026-66776 sap approuter SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions. An attacker with low privileges c...	5.9 Medium	—	0,20%	11 Agt 2026
CVE-2026-66775 sap approuter SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and t...	4.3 Medium	—	0,17%	11 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.