Katalog CVE (hal. 813)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.209 (Critical 36.641 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 40.601–40.650 dari 266.209 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-67314 axios axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapters/http.js and lib/helpers/resolveConfig.js)....	6.5 Medium	—	0,41%	1 Agt 2026
CVE-2026-67313 axios axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can s...	7.5 High	—	0,52%	1 Agt 2026
CVE-2026-67312 axios axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally...	7.5 High	—	0,52%	1 Agt 2026
CVE-2026-67311 Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blackl...	6.8 Medium	—	0,42%	1 Agt 2026
CVE-2026-67310 OpenRemote (org.openremote:openremote) versions <= 1.26.2 contain an insecure direct object reference vulnerability in the setAssetLinks endpoint of AlarmResourceImpl. Th...	5.4 Medium	—	0,24%	1 Agt 2026
CVE-2026-67309 traefik Traefik versions >= v3.7.0 and <= v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware (generated from the ng...	7.5 High	—	0,66%	1 Agt 2026
CVE-2026-67308 Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests w...	9.3 Critical	—	0,73%	1 Agt 2026
CVE-2026-67307 wazuh Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validat...	7.7 High	—	0,23%	1 Agt 2026
CVE-2026-67306 freerdp FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planar_decompress_plane_rle and planar_dec...	5.4 Medium	—	0,38%	1 Agt 2026
CVE-2026-67305 freerdp FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDR_FILE_CONTENTS_RESPONSE PDUs wi...	8.8 High	—	0,77%	1 Agt 2026
CVE-2026-67304 freerdp FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send m...	7.5 High	—	0,65%	1 Agt 2026
CVE-2026-67303 freerdp FreeRDP before 3.29.0 contains a reachable assertion (WINPR_ASSERT(OutputBufferLength == BytesReturned)) in serial_process_irp_device_control() in channels/serial/client/...	4.3 Medium	—	0,42%	1 Agt 2026
CVE-2026-67302 freerdp FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a divide-by-zero vulnerability in the rdpecam camera redirection client. ecam_dev_process_start_streams_reque...	6.5 Medium	—	0,50%	1 Agt 2026
CVE-2026-67301 freerdp FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB primary drawing orders. When AsyncUpda...	7.5 High	—	0,65%	1 Agt 2026
CVE-2026-67300 FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL WINDOW_STATE_ORDER and NOTIFY_ICON_STATE_ORDER w...	7.5 High	—	0,33%	1 Agt 2026
CVE-2026-67299 freerdp FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER when AsyncUpdate is enabled (e.g. xfreerdp /async...	7.5 High	—	0,40%	1 Agt 2026
CVE-2026-67298 FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler (rail_server_handle_messages() in channels/rail/server/rail_mai...	7.5 High	—	0,67%	1 Agt 2026
CVE-2026-67297 freerdp FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in http_response_recv_body(). Attackers controlli...	7.5 High	—	0,52%	1 Agt 2026
CVE-2026-67296 freerdp FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocati...	7.5 High	—	0,52%	1 Agt 2026
CVE-2026-67295 FreeRDP before 3.29.0 fails to properly validate server-supplied RDPDR paths in drive redirection, allowing attackers to access prefix-sibling paths outside the configure...	6.3 Medium	—	0,37%	1 Agt 2026
CVE-2026-67294 freerdp FreeRDP before 3.29.0 improperly validates the Extended Key Usage (EKU) purpose of the peer certificate during client-side server TLS authentication. In x509_utils_verify...	5.9 Medium	—	0,36%	1 Agt 2026
CVE-2026-67293 freerdp FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in...	4.2 Medium	—	0,24%	1 Agt 2026
CVE-2026-67292 freerdp FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/core/gateway/websocket.c). The client's Pong reply re...	6.5 Medium	—	0,48%	1 Agt 2026
CVE-2026-67291 freerdp FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in update_process_glyph_fragments()/glyph_cache_fragment_put() in libfreerdp/cache/...	7.5 High	—	0,41%	1 Agt 2026
CVE-2026-67290 freerdp FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData...	7.5 High	—	0,62%	1 Agt 2026
CVE-2026-67289 freerdp FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This va...	7.5 High	—	0,43%	1 Agt 2026
CVE-2026-67288 freerdp FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCARD_IOCTL_RE...	7.5 High	—	0,43%	1 Agt 2026
CVE-2026-66402 freerdp FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in tls_verify_certificate(), tls_match_hostname(), an...	9.8 Critical	—	0,34%	1 Agt 2026
CVE-2026-66401 freerdp FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing t...	2.1 Low	—	0,20%	1 Agt 2026
CVE-2026-2411 zephyrproject zephyr Zephyr's Bluetooth host declares a GATT characteristic as two consecutive attributes: a Characteristic Declaration whose permission is hard-coded to BT_GATT_PERM_READ, an...	6.5 Medium	—	0,18%	1 Agt 2026
CVE-2026-10773 zephyrproject zephyr The DHCPv4 client helper net_dhcpv4_msg_type_name() in subsys/net/lib/dhcpv4/dhcpv4.c indexes a static 8-element const char * name table after a faulty bounds check. The...	5.4 Medium	—	0,27%	1 Agt 2026
CVE-2025-71404 better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting (XSS) vulnerability on the /api/auth/error page, where the value of the 'erro...	5.1 Medium	—	0,72%	1 Agt 2026
CVE-2025-71403 better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct...	7.1 High	—	0,34%	1 Agt 2026
CVE-2025-71402 better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cooki...	2.0 Low	—	0,27%	1 Agt 2026
CVE-2026-18536 rrwo data Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::Randomnum...	7.5 High	—	0,20%	1 Agt 2026
CVE-2026-6453 The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30. This is due to insufficient input sanitization in the...	6.5 Medium	—	0,47%	1 Agt 2026
CVE-2026-18435 The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Block Attribute in all v...	6.4 Medium	—	0,33%	1 Agt 2026
CVE-2026-18344 The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. T...	6.1 Medium	—	0,36%	1 Agt 2026
CVE-2026-18062 The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Identity Block Inner Image Content in...	6.4 Medium	—	0,36%	1 Agt 2026
CVE-2026-18059 The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1...	5.3 Medium	—	0,58%	1 Agt 2026
CVE-2026-17605 The Payment forms, Buy now buttons, and Invoicing System \| GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56...	6.6 Medium	—	1,2%	1 Agt 2026
CVE-2026-17580 The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulne...	6.5 Medium	—	0,55%	1 Agt 2026
CVE-2026-17571 The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'param...	6.1 Medium	—	0,37%	1 Agt 2026
CVE-2026-17555 The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in versions up to, and including, 0.9.131. This is due to...	4.9 Medium	—	0,44%	1 Agt 2026
CVE-2026-16685 The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in all versions up to, and including, 3.3.66 due to...	6.4 Medium	—	0,42%	1 Agt 2026
CVE-2026-16684 The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5....	6.4 Medium	—	0,33%	1 Agt 2026
CVE-2026-16635 The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the `maybe_update_user_role()` fun...	8.8 High	—	0,58%	1 Agt 2026
CVE-2026-16614 The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up...	4.9 Medium	—	0,44%	1 Agt 2026
CVE-2026-16144 The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.20 via the _sa...	8.1 High	—	1,2%	1 Agt 2026
CVE-2026-16091 The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...	6.4 Medium	—	0,35%	1 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.