Katalog CVE (hal. 859)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.336 (Critical 36.667 · High 106.392 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 42.901–42.950 dari 266.336 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-48021 In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker...	9.1 Critical	—	0,19%	24 Jul 2026
CVE-2026-17107 A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The servic...	8.5 High	—	0,57%	24 Jul 2026
CVE-2026-66035 libssh2 libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metad...	7.5 High	—	0,47%	24 Jul 2026
CVE-2026-66034 libssh2 libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-...	7.5 High	—	0,40%	24 Jul 2026
CVE-2026-66033 libssh2 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that a...	7.5 High	—	0,58%	24 Jul 2026
CVE-2026-66032 libssh2 libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corr...	8.8 High	—	0,45%	24 Jul 2026
CVE-2026-65711 sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators to execute arbitrary commands as the web server pro...	7.2 High	—	2,0%	24 Jul 2026
CVE-2026-65710 sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINK_CREATE profile flag to trigger unauthori...	7.1 High	—	0,30%	24 Jul 2026
CVE-2026-65709 sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allows API token holders to enumerate account metadata...	8.3 High	—	0,39%	24 Jul 2026
CVE-2026-65708 sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belong...	8.1 High	—	0,39%	24 Jul 2026
CVE-2026-65707 Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitize...	6.5 Medium	—	0,46%	24 Jul 2026
CVE-2026-65623 Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU exhaustion during WebSocket fragment reassembly...	8.7 High	—	0,48%	24 Jul 2026
CVE-2026-66027 Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources b...	8.3 High	—	0,46%	24 Jul 2026
CVE-2026-65693 Microweber CMS through 2.0.20 contains a server-side template injection vulnerability that allows authenticated administrators to achieve arbitrary OS command execution b...	7.2 High	—	0,92%	24 Jul 2026
CVE-2026-64255 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers...	8.8 High	—	0,27%	24 Jul 2026
CVE-2026-64254 linux kernel In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR When BAR_PEER_SPAD and...	5.5 Medium	—	0,11%	24 Jul 2026
CVE-2026-64253 linux kernel In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() PF_BLOCK_TS is only set in blk_time_get_ns() when c...	5.5 Medium	—	0,11%	24 Jul 2026
CVE-2026-64252 linux kernel In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling th...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64251 linux kernel In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next() pwrseq_debugfs_seq_next() declares 'ne...	7.8 High	—	0,17%	24 Jul 2026
CVE-2026-64250 linux kernel In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stop_this_cpu() This is a port of MIPS commit 9f3f3bdc6d9dac1...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64249 linux kernel In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_regions_with_firmware() Move of_node_put(child_region) aft...	7.8 High	—	0,12%	24 Jul 2026
CVE-2026-64248 linux kernel In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop_this_cpu() smp_send_stop() parks all secondary CPUs in st...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64247 linux kernel In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP ID is inclu...	8.4 High	—	0,16%	24 Jul 2026
CVE-2026-64246 linux kernel In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init() Move of_no...	7.8 High	—	0,12%	24 Jul 2026
CVE-2026-64245 linux kernel In the Linux kernel, the following vulnerability has been resolved: fbdev: modedb: fix a possible UAF in fb_find_mode() If mode_option is NULL, it is assigned from mode...	7.8 High	—	0,12%	24 Jul 2026
CVE-2026-64244 linux kernel In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successful device registration If __add_memory_block() fa...	5.5 Medium	—	0,12%	24 Jul 2026
CVE-2026-64243 linux kernel In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bounds check simple_mux_control_put() rejects values grea...	7.1 High	—	0,16%	24 Jul 2026
CVE-2026-64242 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb_initialize_gadget() installs gadget_re...	7.8 High	—	0,12%	24 Jul 2026
CVE-2026-64241 linux kernel In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks...	5.5 Medium	—	0,11%	24 Jul 2026
CVE-2026-64240 linux kernel In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f ("media: rc: igorplugus...	5.5 Medium	—	0,12%	24 Jul 2026
CVE-2026-64239 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON sysfs maintains the DAMOS trie...	7.8 High	—	0,12%	24 Jul 2026
CVE-2026-64238 linux kernel In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: shared: call...	5.5 Medium	—	0,11%	24 Jul 2026
CVE-2026-64237 linux kernel In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to...	7.1 High	—	0,12%	24 Jul 2026
CVE-2026-64236 linux kernel In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64235 linux kernel In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIG_CALL_DEPTH_TRACKIN...	8.1 High	—	0,33%	24 Jul 2026
CVE-2026-64234 linux kernel In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coherent() failu...	5.5 Medium	—	0,12%	24 Jul 2026
CVE-2026-64233 linux kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind uvc_function_bind() walks &op...	5.5 Medium	—	0,11%	24 Jul 2026
CVE-2026-64232 linux kernel In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request blk_insert_cloned_request() alre...	9.8 Critical	—	0,43%	24 Jul 2026
CVE-2026-64231 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is...	5.5 Medium	—	0,12%	24 Jul 2026
CVE-2026-64230 linux kernel In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being assigned Commit 64a6b577490c ("regulator: tps65219:...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64229 linux kernel In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86_FEATURE_P...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64228 linux kernel In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev->drv can become NULL while the...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64227 linux kernel In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL during probe Since every platform driver can be fo...	5.5 Medium	—	0,16%	24 Jul 2026
CVE-2026-64226 linux kernel In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path In scx_root_enable_workfn(), put_...	7.8 High	—	0,18%	24 Jul 2026
CVE-2026-64225 linux kernel In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_...	7.8 High	—	0,13%	24 Jul 2026
CVE-2026-64224 linux kernel In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init() rvu_rep_rsrc_init() allocates queue memory befo...	7.8 High	—	0,13%	24 Jul 2026
CVE-2026-64223 linux kernel In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211_tid_to_link_map_size_ok() valida...	8.1 High	—	0,39%	24 Jul 2026
CVE-2026-64222 linux kernel In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on AQ init failure otx2_pool_aq_init() frees pool->st...	7.0 High	—	0,12%	24 Jul 2026
CVE-2026-64221 linux kernel In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA se...	7.8 High	—	0,13%	24 Jul 2026
CVE-2026-64220 linux kernel In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in fwnode_init() If a firmware node is allocated on t...	5.5 Medium	—	0,12%	24 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.