Katalog CVE (hal. 853)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.301 (Critical 36.664 · High 106.384 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.601–42.650 dari 266.301 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-17457 A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigatio...	4.3 Medium	—	0,42%	26 Jul 2026
CVE-2026-64530 Advisory In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle tcf_classify() can return TC_ACT_CON...	9.8 Critical	—	0,66%	26 Jul 2026
CVE-2024-14040 In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Increase weight to u16 In CLOS networks, as link failures occur at various points in t...	7.8 High	—	0,17%	26 Jul 2026
CVE-2026-63720 datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution...	7.5 High	—	0,74%	26 Jul 2026
CVE-2026-17434 A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_...	6.3 Medium	—	0,37%	26 Jul 2026
CVE-2026-17433 A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the com...	5.3 Medium	—	0,15%	26 Jul 2026
CVE-2026-15962 The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted i...	8.8 High	—	0,55%	26 Jul 2026
CVE-2026-17432 A vulnerability was detected in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/...	5.0 Medium	—	0,36%	26 Jul 2026
CVE-2026-10681 zephyrproject zephyr In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_ma...	7.0 High	—	0,12%	25 Jul 2026
CVE-2026-66013 OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console...	9.3 Critical	—	0,68%	25 Jul 2026
CVE-2026-66012 SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check (model.CheckAuth) with n...	10.0 Critical	—	0,76%	25 Jul 2026
CVE-2026-66011 imagemagick ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exha...	3.3 Low	—	0,13%	25 Jul 2026
CVE-2026-64529 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (q...	7.8 High	—	0,18%	25 Jul 2026
CVE-2026-64524 In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WIN8 fallback A SYNTHVID_RESOLUTION_RESPONSE with reso...	7.7 High	—	0,14%	25 Jul 2026
CVE-2026-64523 In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshake_nl_accept_doit() needs the file...	9.8 Critical	—	0,45%	25 Jul 2026
CVE-2026-64522 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5e_xfrm_add_state() handles acqui...	8.8 High	—	0,51%	25 Jul 2026
CVE-2026-64520 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The register-based PARTITION_INFO_GET path t...	8.4 High	—	0,13%	25 Jul 2026
CVE-2026-64516 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset...	8.8 High	—	0,17%	25 Jul 2026
CVE-2026-64515 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element (MLE) is contain...	8.3 High	—	0,24%	25 Jul 2026
CVE-2026-64510 In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup If acpi_nfit_init() fails after adding the acpi...	7.0 High	—	0,14%	25 Jul 2026
CVE-2026-64502 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices ad_sigma_delta_clear_pend...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64501 In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix CS held asserted and state leaks In ad_sigma_delta_single_conversion()...	7.1 High	—	0,17%	25 Jul 2026
CVE-2026-64496 In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race `iio_event_getfd()` creates the event file descriptor with `an...	7.1 High	—	0,12%	25 Jul 2026
CVE-2026-64490 In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the devic...	8.4 High	—	0,19%	25 Jul 2026
CVE-2026-64485 In the Linux kernel, the following vulnerability has been resolved: ALSA: compress: Fix task creation error unwind snd_compr_task_new() allocates the driver task before...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64481 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41_hda creates ALSA controls whose private d...	7.8 High	—	0,18%	25 Jul 2026
CVE-2026-64475 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on register_device() failure The re-order in the Fixes comm...	8.8 High	—	0,14%	25 Jul 2026
CVE-2026-64469 In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_thread_release() When a thread exits, binder_thread_release() walks its tr...	7.8 High	—	0,14%	25 Jul 2026
CVE-2026-64468 In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binder_free_transaction() In binder_free_transaction(), the t->to_proc is read un...	7.8 High	—	0,14%	25 Jul 2026
CVE-2026-64467 In the Linux kernel, the following vulnerability has been resolved: rust_binder: use a u64 stride when cleaning up the offsets array Allocation's Drop walks the offsets...	8.8 High	—	0,17%	25 Jul 2026
CVE-2026-64463 In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres rt1711h_probe() registers the TCPCI por...	7.8 High	—	0,14%	25 Jul 2026
CVE-2026-64460 In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read error sriov_restore_vf_rebar_state() uses the VF Resi...	7.0 High	—	0,14%	25 Jul 2026
CVE-2026-64459 In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Commit 51e547e8c89c ("tcp: Free TCP-AO/TCP-MD5...	9.8 Critical	—	0,65%	25 Jul 2026
CVE-2026-64456 Advisory In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copy_data() random_recv_done() stores the device-re...	7.7 High	—	0,15%	25 Jul 2026
CVE-2026-64453 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: fix disconnect UAF in client teardown usbio_disconnect() walks usbio->cli_list in...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64452 linux kernel In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpan_nhc_do_uncompression() looks up an NHC de...	7.1 High	—	0,22%	25 Jul 2026
CVE-2026-64451 linux kernel In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in func_set_flag() func_set_flag() dereferences tr->current_tr...	5.5 Medium	—	0,14%	25 Jul 2026
CVE-2026-64450 linux kernel In the Linux kernel, the following vulnerability has been resolved: tipc: fix out-of-bounds read in broadcast Gap ACK blocks A broadcast PROTOCOL/STATE_MSG can carry a...	9.1 Critical	—	0,54%	25 Jul 2026
CVE-2026-64449 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: bound slave read/write to the kern_buf size The SLAVE-path helpers buffer_to_user...	7.8 High	—	0,14%	25 Jul 2026
CVE-2026-64448 linux kernel In the Linux kernel, the following vulnerability has been resolved: smb: client: restrict implied bcc[0] exemption to responses without data area smb2_check_message() h...	8.2 High	—	0,46%	25 Jul 2026
CVE-2026-64447 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix double-free and use-after-free in error paths In both ipu7_isys_init() and...	7.8 High	—	0,17%	25 Jul 2026
CVE-2026-64446 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() supplicant_ie is a 256-byt...	7.8 High	—	0,15%	25 Jul 2026
CVE-2026-64445 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() OnAuth() has two bugs in the s...	8.8 High	—	0,32%	25 Jul 2026
CVE-2026-64444 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop The IE parsing loop in OnAssocRsp() advance...	8.1 High	—	0,29%	25 Jul 2026
CVE-2026-64443 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop The IE parsing loop in update_beaco...	8.1 High	—	0,28%	25 Jul 2026
CVE-2026-64442 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Two IE parsing...	8.1 High	—	0,29%	25 Jul 2026
CVE-2026-64441 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Thr...	8.8 High	—	0,26%	25 Jul 2026
CVE-2026-64440 linux kernel In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_handler() HT_caps_handler() iterates pIE->length bytes...	8.1 High	—	0,27%	25 Jul 2026
CVE-2026-64439 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5_aead_encrypt(), krb5_aead_decrypt...	9.8 Critical	—	0,63%	25 Jul 2026
CVE-2026-64438 linux kernel In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() The VF2PF interrupt handler queues...	8.8 High	—	0,14%	25 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.