Katalog CVE (hal. 879)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.702 (Critical 36.692 · High 106.576 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 3 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 43.901–43.950 dari 266.702 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-16607 A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an alr...	7.8 High	—	0,15%	22 Jul 2026
CVE-2026-16606 A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-a...	9.8 Critical	—	1,1%	22 Jul 2026
CVE-2026-48029 struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced tile-...	7.1 High	—	0,36%	22 Jul 2026
CVE-2026-2395 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQ...	9.8 Critical	—	0,47%	22 Jul 2026
CVE-2026-14985 The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege d...	7.8 High	—	0,17%	22 Jul 2026
CVE-2026-13321 isc bind The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 throu...	8.6 High	—	0,21%	22 Jul 2026
CVE-2026-13204 isc bind If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpect...	7.5 High	—	0,52%	22 Jul 2026
CVE-2026-12617 isc bind The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client...	7.5 High	—	0,52%	22 Jul 2026
CVE-2026-11721 isc bind It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `...	7.5 High	—	0,40%	22 Jul 2026
CVE-2026-11622 isc bind A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to s...	7.5 High	—	0,54%	22 Jul 2026
CVE-2026-11605 isc bind The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly ne...	7.5 High	—	0,67%	22 Jul 2026
CVE-2026-11331 isc bind An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during...	7.5 High	—	0,43%	22 Jul 2026
CVE-2026-10822 isc bind If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to sto...	6.5 Medium	—	0,38%	22 Jul 2026
CVE-2026-10723 isc bind BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9...	6.8 Medium	—	0,27%	22 Jul 2026
CVE-2026-62145 A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges.	7.5 High	—	0,39%	22 Jul 2026
CVE-2026-62144 An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute admini...	9.1 Critical	—	1,0%	22 Jul 2026
CVE-2026-56444 nlnetlabs unbound In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout > discard-timeout > 0' (co...	5.9 Medium	—	0,37%	22 Jul 2026
CVE-2026-56416 nlnetlabs unbound In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the a...	4.8 Medium	—	0,12%	22 Jul 2026
CVE-2026-55991 nlnetlabs unbound In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate...	5.9 Medium	—	0,37%	22 Jul 2026
CVE-2026-55990 nlnetlabs unbound In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-ke...	5.9 Medium	—	0,25%	22 Jul 2026
CVE-2026-55973 nlnetlabs unbound In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response...	7.5 High	—	0,28%	22 Jul 2026
CVE-2026-55717 nlnetlabs unbound In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: <net> redirect' /'response-ip-data: <net> CNAME <t...	5.9 Medium	—	0,24%	22 Jul 2026
CVE-2026-55708 nlnetlabs unbound In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an a...	3.1 Low	—	0,16%	22 Jul 2026
CVE-2026-54478 nlnetlabs unbound In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie S...	3.7 Low	—	0,24%	22 Jul 2026
CVE-2026-53910 diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in...	2.1 Low	—	0,33%	22 Jul 2026
CVE-2026-52863 nlnetlabs unbound In NLnet Labs Unbound 1.25.0 up to and including 1.25.1, a fix that makes the 'respip' and 'dns64' modules work together, creates a shallow copy of the view name in effec...	5.9 Medium	—	0,37%	22 Jul 2026
CVE-2026-50252 nlnetlabs unbound In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transacti...	9.3 Critical	—	0,17%	22 Jul 2026
CVE-2026-50251 nlnetlabs unbound In NLnet Labs Unbound up to and including version 1.25.1, when 'unwanted-reply-threshold' is enabled (set to any value greater than zero), glue records of 0.0.0.0/::0 can...	5.3 Medium	—	0,25%	22 Jul 2026
CVE-2026-50248 nlnetlabs unbound In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when an auth/rpz zone has a configured primary hostname that resolves to BOGUS A/AAAA, it is still considered as a...	6.5 Medium	—	0,13%	22 Jul 2026
CVE-2026-50243 nlnetlabs unbound In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redire...	3.7 Low	—	0,11%	22 Jul 2026
CVE-2026-50046 nlnetlabs unbound In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS (DoT) forwarded queries is tied to a struct's ('serviced_query') lifeti...	5.9 Medium	—	0,24%	22 Jul 2026
CVE-2026-50045 nlnetlabs unbound In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a single client query for a deeply nested name under a DNSSEC-signed parent can cause Unbound to send more upstre...	5.3 Medium	—	0,46%	22 Jul 2026
CVE-2026-46582 nlnetlabs unbound In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the...	3.7 Low	—	0,19%	22 Jul 2026
CVE-2026-44690 nlnetlabs unbound In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive...	7.5 High	—	0,15%	22 Jul 2026
CVE-2026-44687 nlnetlabs unbound In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the name is below an intermediate labed below a DNSSEC signed zone could be shadowed...	3.7 Low	—	0,22%	22 Jul 2026
CVE-2026-44621 nlnetlabs unbound With NLnet Labs Unbound up to and including version 1.25.1, applications using libunbound and configured with 'unwanted-reply-threshold', could eventually be abruptly ter...	5.9 Medium	—	0,25%	22 Jul 2026
CVE-2026-42955 nlnetlabs unbound In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of attacks was found in Unbound...	3.7 Low	—	0,20%	22 Jul 2026
CVE-2026-41637 nlnetlabs unbound In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound resulting in low-cost inflati...	3.7 Low	—	0,37%	22 Jul 2026
CVE-2026-40691 nlnetlabs unbound In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length agai...	7.5 High	—	0,29%	22 Jul 2026
CVE-2026-32665 nlnetlabs unbound In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, when downstream DNS-over-QUIC (DoQ) is enabled, the first two bidirectional streams on a new QUIC connection (str...	7.5 High	—	0,29%	22 Jul 2026
CVE-2026-16560 A heap-buffer-overflow flaw was found in Directory Server (389-ds-base). When a DN contains a legacy-quoted value, the server won't close the heap allocation allowing ano...	5.3 Medium	—	0,40%	22 Jul 2026
CVE-2026-16232 checkpoint multi-domain security management An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and us...	9.8 Critical	KEV	3,5%	22 Jul 2026
CVE-2026-14932 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, the obsolete RadChart component's ChartImage.axd handler is vulnerable to unauthenticated file read and deletion o...	6.5 Medium	—	0,35%	22 Jul 2026
CVE-2026-14865 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, the internal LayoutBuilder control processes client-state XML without disabling DTD processing, allowing unauthent...	5.3 Medium	—	0,43%	22 Jul 2026
CVE-2026-14586 In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, in DNS-over-QUIC environments, with high concurrency and under pressure, an assertion in libngtcp2 about monotoni...	5.9 Medium	—	0,37%	22 Jul 2026
CVE-2026-13192 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attack...	6.5 Medium	—	0,42%	22 Jul 2026
CVE-2026-13190 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influe...	8.1 High	—	0,50%	22 Jul 2026
CVE-2026-13189 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of the language parameter in the spell check handler may allow an attacker to influence se...	7.5 High	—	0,36%	22 Jul 2026
CVE-2026-13188 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler request parameters may be tampered with, potentially altering dialog server-side behavior and enabli...	5.9 Medium	—	0,16%	22 Jul 2026
CVE-2026-13187 progress telerik ui for asp.net ajax In Progress® Telerik® UI for AJAX prior to v2026.2.708, DialogHandler provider type input may be tampered with, potentially altering dialog processing and enabling chaine...	8.1 High	—	0,34%	22 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.