Katalog CVE (hal. 794)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.187 (Critical 36.636 · High 106.360 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 39.651–39.700 dari 266.187 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-53992 ProjectSend r2029 contains a reflected cross-site scripting vulnerability in thumbnails-regenerate.php that allows remote attackers to inject arbitrary HTML and JavaScrip...	6.1 Medium	—	0,40%	5 Agt 2026
CVE-2026-50749 apache answer Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Any authenticated user can reject arbitrary pending edit-revisio...	6.5 Medium	—	0,47%	5 Agt 2026
CVE-2026-49331 A flaw was found in openshift/oauth-proxy. On paths configured to bypass authentication (skip-auth-regex), the proxy forwards client-supplied identity headers (X-Forwarde...	6.5 Medium	—	0,19%	5 Agt 2026
CVE-2026-48912 apache answer Improper Input Validation vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing ownership check in the avatar-cleanup logic allows...	6.5 Medium	—	0,47%	5 Agt 2026
CVE-2026-48911 apache answer Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the ext...	7.5 High	—	0,58%	5 Agt 2026
CVE-2026-48834 apache answer Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. Unauthenticated attackers can cause...	7.5 High	—	0,76%	5 Agt 2026
CVE-2026-39924 Flarum before 1.8.16 contains an improper session invalidation vulnerability that allows attackers who hold a valid session token to retain full account access after a vi...	6.8 Medium	—	0,37%	5 Agt 2026
CVE-2026-39923 Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attackers to reuse expired password reset tokens by submittin...	8.1 High	—	0,43%	5 Agt 2026
CVE-2026-18531 ibm maximo application suite IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.	5.3 Medium	—	0,38%	5 Agt 2026
CVE-2026-16442 redhat build of keycloak A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated...	9.8 Critical	—	0,31%	5 Agt 2026
CVE-2026-15656 ibm maximo application suite IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie value...	4.3 Medium	—	0,19%	5 Agt 2026
CVE-2026-15587 Improper Privilege Management in Google SecOps (Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges...	9.4 Critical	—	0,23%	5 Agt 2026
CVE-2026-15572 redhat build of keycloak A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of da...	8.8 High	—	0,65%	5 Agt 2026
CVE-2026-13477 ibm qradar security information and event manager IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal u...	8.8 High	—	0,49%	5 Agt 2026
CVE-2026-12762 ibm business automation insights IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.	5.3 Medium	—	0,40%	5 Agt 2026
CVE-2026-12730 ibm business automation workflow IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0....	3.8 Low	—	0,17%	5 Agt 2026
CVE-2026-10025 ibm qradar security information and event manager IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability. The vulnerability resides in t...	9.8 Critical	—	0,65%	5 Agt 2026
CVE-2026-54876 Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single...	7.5 High	—	0,52%	5 Agt 2026
CVE-2026-17613 Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server a...	7.5 High	—	0,61%	5 Agt 2026
CVE-2026-16102 redhat build of keycloak, redhat data grid +2 lainnya A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR policy fails to properly vali...	8.1 High	—	0,46%	5 Agt 2026
CVE-2026-16100 redhat build of keycloak A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Promet...	6.5 Medium	—	0,55%	5 Agt 2026
CVE-2026-16071 redhat build of keycloak A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administ...	5.4 Medium	—	0,32%	5 Agt 2026
CVE-2026-15573 redhat build of keycloak, redhat data grid +2 lainnya A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize...	8.1 High	—	0,46%	5 Agt 2026
CVE-2026-12410 Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYST...	7.8 High	—	0,17%	5 Agt 2026
CVE-2026-7529 The wiseCampaign – WooCommerce Conversions Made Easy plugin for WordPress is vulnerable to unauthorized modification and disclosure of data due to every one of its REST A...	7.5 High	—	0,63%	5 Agt 2026
CVE-2026-7456 The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_disconnect()` function in all versi...	6.5 Medium	—	0,44%	5 Agt 2026
CVE-2026-67623 Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook...	8.8 High	—	1,1%	5 Agt 2026
CVE-2026-17506 The Independent Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 404 not_found_url tracking parameter in versions up to, and including,...	7.2 High	—	0,40%	5 Agt 2026
CVE-2026-16443 redhat build of keycloak A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloa...	9.1 Critical	—	0,32%	5 Agt 2026
CVE-2026-15979 The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and inc...	8.1 High	—	1,2%	5 Agt 2026
CVE-2025-70962 Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker...	7.5 High	—	0,50%	5 Agt 2026
CVE-2026-71294 Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instantiated. In plugins/comments/controllers/actions/CreateActi...	7.6 High	—	0,38%	5 Agt 2026
CVE-2026-71293 Statamic CMS's user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user's raw two-fact...	6.2 Medium	—	0,37%	5 Agt 2026
CVE-2026-71292 Subrion CMS's admin grid sorting helper, _gridGetSorting in includes/classes/ia.base.controller.admin.php, whitelists the (ASC/DESC) request parameter via in_array, but f...	7.2 High	—	0,57%	5 Agt 2026
CVE-2026-71291 Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field....	8.8 High	—	0,55%	5 Agt 2026
CVE-2026-71289 The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly t...	9.8 Critical	—	0,68%	5 Agt 2026
CVE-2026-71288 Koha's guided report builder (reports/guided_reports.pl) reads the CGI parameter and, for each value, a dynamically-named parameter, and concatenates both directly into a...	8.8 High	—	0,55%	5 Agt 2026
CVE-2026-71287 Cacti's sanitize_sql_column (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex . Because this allowlist retains letters, digits, underscore...	8.8 High	—	0,55%	5 Agt 2026
CVE-2026-71286 The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (fr...	6.1 Medium	—	0,26%	5 Agt 2026
CVE-2026-71285 Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression in...	8.1 High	—	0,38%	5 Agt 2026
CVE-2026-71284 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names...	7.2 High	—	0,92%	5 Agt 2026
CVE-2026-71283 Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar ar...	4.9 Medium	—	0,43%	5 Agt 2026
CVE-2026-71282 ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count and list) interpolates the user-supplied tag KEY directly into a raw...	6.5 Medium	—	0,39%	5 Agt 2026
CVE-2026-71281 Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch....	8.8 High	—	0,50%	5 Agt 2026
CVE-2026-71280 go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP val...	8.5 High	—	0,30%	5 Agt 2026
CVE-2026-71279 Zigbee2MQTT's ExternalJSExtension.getFilePath (lib/extension/externalJS.ts) joins a parameter received via an MQTT message (topic zigbee2mqtt/bridge/request/extension/sav...	8.0 High	—	0,57%	5 Agt 2026
CVE-2026-71278 rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) containing an arbitrary field. This route does not tak...	9.8 Critical	—	0,67%	5 Agt 2026
CVE-2026-71277 rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the Authorization HTTP header is present, and never validates its value a...	9.1 Critical	—	0,42%	5 Agt 2026
CVE-2026-71276 Magistrala (formerly Mainflux)'s message-readers API reads a value from the HTTP query string (readers/api/http/transport.go) with no validation and interpolates it direc...	7.1 High	—	0,32%	5 Agt 2026
CVE-2026-71275 OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects the `host` query parameter directly into an HTML response via hprintf255(request, "<h3>OTA requested...	5.4 Medium	—	0,23%	5 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.