Katalog CVE (hal. 807)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.209 (Critical 36.641 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 40.301–40.350 dari 266.209 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2025-15630 tp-link omada oc200 v3 firmware, tp-link omada oc300 firmware +58 lainnya A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device co...	5.9 Medium	—	0,31%	3 Agt 2026
CVE-2025-15629 tp-link omada oc200 v3 firmware, tp-link omada oc300 firmware +58 lainnya A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be...	7.5 High	—	0,33%	3 Agt 2026
CVE-2025-15628 tp-link omada oc200 v3 firmware, tp-link omada oc300 firmware +58 lainnya Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker w...	7.5 High	—	0,32%	3 Agt 2026
CVE-2025-15627 tp-link omada oc200 v3 firmware, tp-link omada oc300 firmware +58 lainnya A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchan...	7.5 High	—	0,68%	3 Agt 2026
CVE-2025-15544 tp-link omada oc200 v3 firmware, tp-link omada oc300 firmware +58 lainnya A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are transmitted using a...	5.9 Medium	—	0,34%	3 Agt 2026
CVE-2026-61524 WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve...	7.2 High	—	1,0%	3 Agt 2026
CVE-2026-61523 WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by su...	7.2 High	—	1,2%	3 Agt 2026
CVE-2026-40717 dell monitor driver Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local acces...	7.8 High	—	0,16%	3 Agt 2026
CVE-2026-18613 A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.set_config of the file /cgi-bin/glc of the component plugins.so N...	9.8 Critical	—	1,00%	3 Agt 2026
CVE-2026-18612 A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plugins.remove_package/plugins.install_package of the file /cgi-bin/glc of...	9.8 Critical	—	4,0%	3 Agt 2026
CVE-2025-9291 tp-link omada fusion 2.5g firmware, tp-link omada er707-m2 firmware +58 lainnya A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately va...	6.5 Medium	—	0,22%	3 Agt 2026
CVE-2026-69153 postcss PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an...	5.3 Medium	—	0,45%	3 Agt 2026
CVE-2026-69152 juliangruber brace-expansion The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength...	7.5 High	—	0,65%	3 Agt 2026
CVE-2026-69151 angular Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.1,...	6.1 Medium	—	0,33%	3 Agt 2026
CVE-2026-69149 angular Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7,...	6.1 Medium	—	0,42%	3 Agt 2026
CVE-2026-68945 angular Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2,...	6.1 Medium	—	0,18%	3 Agt 2026
CVE-2026-68930 Russh is a Rust SSH client & server library. Prior to 0.62.5, russh dispatches channel-scoped Handler callbacks for recipient channel IDs that were never opened or confir...	6.5 Medium	—	0,38%	3 Agt 2026
CVE-2026-67612 OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitr...	4.8 Medium	—	0,25%	3 Agt 2026
CVE-2026-67611 open-emr openemr OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting...	8.1 High	—	0,79%	3 Agt 2026
CVE-2026-67610 OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to regist...	8.1 High	—	0,48%	3 Agt 2026
CVE-2026-61372 apache jena fuseki Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0....	7.5 High	—	0,81%	3 Agt 2026
CVE-2026-41453 Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in the leads DataGrid that allows authenticated users with leads access to inject arbitrary SQL into...	8.8 High	—	0,50%	3 Agt 2026
CVE-2026-41452 Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary adminis...	9.8 Critical	—	3,7%	3 Agt 2026
CVE-2026-39932 open-emr openemr OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated ad...	9.1 Critical	—	2,0%	3 Agt 2026
CVE-2026-39931 open-emr openemr OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL...	7.2 High	—	0,64%	3 Agt 2026
CVE-2026-18718 Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious G...	7.0 High	—	0,17%	3 Agt 2026
CVE-2026-18610 A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIP_Com_FileList.aspx. The manipulation results in improper authentica...	5.3 Medium	—	0,68%	3 Agt 2026
CVE-2026-18607 A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up...	8.8 High	—	0,79%	3 Agt 2026
CVE-2026-18606 A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86)\Razer\RzU...	7.8 High	—	0,16%	3 Agt 2026
CVE-2026-18605 A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter D...	7.0 High	—	0,16%	3 Agt 2026
CVE-2026-18604 A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android. This impacts the function DialerActivity of the component com.gogii.textplus....	5.3 Medium	—	0,15%	3 Agt 2026
CVE-2026-18602 A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function ovpn-client.get_recommend_config of the file /cgi-bin/glc of the component ovpn-...	9.8 Critical	—	3,6%	3 Agt 2026
CVE-2026-18477 gnu tar, redhat openshift container platform +1 lainnya A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being bac...	4.4 Medium	—	0,08%	3 Agt 2026
CVE-2026-18243 Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews.	6.9 Medium	—	0,29%	3 Agt 2026
CVE-2026-18651 redhat directory server, redhat 389 directory server +1 lainnya A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check...	5.4 Medium	—	0,28%	3 Agt 2026
CVE-2026-18568 xml XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic...	7.5 High	—	0,32%	3 Agt 2026
CVE-2026-18508 gnu tar, redhat openshift container platform +1 lainnya A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may r...	4.4 Medium	—	0,14%	3 Agt 2026
CVE-2026-18248 fastify/aws-lambda @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to us...	9.1 Critical	—	0,38%	3 Agt 2026
CVE-2026-15430 Improper access control in the IRP_MJ_WRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve l...	6.2 Medium	—	0,15%	3 Agt 2026
CVE-2026-67609 Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access...	7.8 High	—	0,20%	3 Agt 2026
CVE-2026-9487 xml XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() in lib/XML/Sig.pm, called from verify(), resolves the SignedInfo Refe...	9.1 Critical	—	0,28%	3 Agt 2026
CVE-2026-9390 xml XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions by concatenating the...	9.1 Critical	—	0,51%	3 Agt 2026
CVE-2026-69097 gitpython project gitpython GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious subm...	7.3 High	—	0,27%	3 Agt 2026
CVE-2026-69096 OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) contains an OS command i...	8.8 High	—	3,3%	3 Agt 2026
CVE-2026-69095 OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-info CGI script that allows unauthenticat...	7.5 High	—	0,93%	3 Agt 2026
CVE-2026-69094 Admidio before 5.0.11 contains an insecure direct object reference vulnerability in the save_temporary mode of mylist_function.php that allows authenticated users to hija...	4.3 Medium	—	0,26%	3 Agt 2026
CVE-2026-69093 Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes bas...	4.6 Medium	—	0,16%	3 Agt 2026
CVE-2026-69092 Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP respon...	6.5 Medium	—	0,38%	3 Agt 2026
CVE-2026-69091 Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.ph...	7.5 High	—	0,61%	3 Agt 2026
CVE-2026-69090 Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or ed...	4.9 Medium	—	0,34%	3 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.