Katalog CVE (hal. 945)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 47.201–47.250 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-16118 A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when...	7.1 High	—	0,28%	17 Jul 2026
CVE-2026-15995 ibm cognos analytics IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-proc...	4.2 Medium	—	0,17%	17 Jul 2026
CVE-2026-15415 AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure required to run bioinformatics analyses at scale f...	5.5 Medium	—	0,35%	17 Jul 2026
CVE-2026-15322 ibm engineering ai hub IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs.	7.5 High	—	0,52%	17 Jul 2026
CVE-2026-15093 ibm engineering ai hub IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due to improper validation of user-supplied URLs.	4.3 Medium	—	0,37%	17 Jul 2026
CVE-2026-15091 ibm engineering ai hub IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generati...	9.3 Critical	—	0,57%	17 Jul 2026
CVE-2026-15069 ibm engineering ai hub IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to improper neutralization of input during web page gene...	5.4 Medium	—	0,30%	17 Jul 2026
CVE-2026-14979 ibm engineering lifecycle management IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix...	7.5 High	—	0,55%	17 Jul 2026
CVE-2026-14971 ibm powervm novalink IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized op...	7.0 High	—	0,13%	17 Jul 2026
CVE-2026-14501 ibm agentics, ibm db2 genius hub IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous fu...	9.8 Critical	—	0,46%	17 Jul 2026
CVE-2026-14499 langflow IBM Langflow OSS 1.0.0 through 1.10.1 Langflow could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper vali...	8.8 High	—	0,67%	17 Jul 2026
CVE-2026-13473 ibm storage protect IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by im...	9.8 Critical	—	0,67%	17 Jul 2026
CVE-2026-13448 langflow IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code execution vulnerability in the public flow build endpoint ( /api/v1/build_public...	9.8 Critical	—	0,67%	17 Jul 2026
CVE-2026-12283 Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that al...	6.8 Medium	—	0,59%	17 Jul 2026
CVE-2025-51678 An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior.	7.5 High	—	0,61%	17 Jul 2026
CVE-2025-51677 An issue was discovered in openRISC OR1200 commit 83ac6b. An output mismatch between the RTL and the netlist of the or1200 cpu output port can lead to unexpected behavior...	9.1 Critical	—	0,63%	17 Jul 2026
CVE-2026-9171 ibm powervm novalink IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote a...	7.5 High	—	0,55%	17 Jul 2026
CVE-2026-9135 langflow IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 (commit 94981c443d4918517b9e8163d70fc598dc33a32d) contain a code injection vulnerability in the Polici...	9.9 Critical	—	0,84%	17 Jul 2026
CVE-2026-9103 langflow IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to gain unauthorized access due to improper authentication in the /api/v1/login/auto_login endpoint. T...	9.8 Critical	—	3,2%	17 Jul 2026
CVE-2026-58195 Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdio.ts, src/mcp/fastmcp/servers/claude-flow-sdk...	8.8 High	—	0,56%	17 Jul 2026
CVE-2026-53712 SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. P...	8.2 High	—	0,26%	17 Jul 2026
CVE-2026-52746 jsonata JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking...	7.5 High	—	0,69%	17 Jul 2026
CVE-2026-50185 rustcrypto cmov RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compi...	3.3 Low	—	0,16%	17 Jul 2026
CVE-2026-49835 linuxfoundation sigstore timestamp authority Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and...	7.5 High	—	0,74%	17 Jul 2026
CVE-2026-48487 paulsm zeroconf Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string and _read_string in src/zeroconf/_protocol/incoming...	5.3 Medium	—	0,47%	17 Jul 2026
CVE-2026-48045 paulsm zeroconf Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handle_query_or_defer retained every truncated TC-bit incomi...	6.5 Medium	—	0,37%	17 Jul 2026
CVE-2026-47184 paulsm zeroconf Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache._async_add inserted every response record into cache, _expirations...	6.5 Medium	—	0,39%	17 Jul 2026
CVE-2026-47183 paulsm zeroconf Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming._log_exception_debug and the four QuietLogger exception-dedup m...	6.5 Medium	—	0,39%	17 Jul 2026
CVE-2026-47180 paulsm zeroconf Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming._decode_labels_at_offset recurses once per DNS-name compression...	6.5 Medium	—	0,37%	17 Jul 2026
CVE-2026-45703 Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordExport export flow in bundles/WordExportBundle/src/Controller/...	6.4 Medium	—	0,32%	17 Jul 2026
CVE-2026-45309 asyncssh project asyncssh AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.0...	7.5 High	—	0,59%	17 Jul 2026
CVE-2026-45162 Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple Pimcore locations call PHP's unserialize() on data from datab...	8.0 High	—	0,99%	17 Jul 2026
CVE-2026-16073 A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function Star.text_to_image/NetworkRenderStrategy.render of...	3.5 Low	—	0,33%	17 Jul 2026
CVE-2026-9762 ibm db2 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control.	7.8 High	—	0,25%	17 Jul 2026
CVE-2026-9202 langflow IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEW_USER_IS_ACTIVE=true (documente...	9.8 Critical	—	0,50%	17 Jul 2026
CVE-2026-9198 langflow IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/co...	9.8 Critical	KEV	28,7%	17 Jul 2026
CVE-2026-50273 Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse inc...	7.5 High	—	0,79%	17 Jul 2026
CVE-2026-48016 Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the Store API endpoint /store-api/handle-payment in src/Core/Checkout/Payment/SalesChannel/HandleP...	4.3 Medium	—	0,41%	17 Jul 2026
CVE-2026-48015 Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, SVG files are in the allowed_extensions whitelist in src/Core/Framework/Resources/config/packages/...	4.9 Medium	—	0,49%	17 Jul 2026
CVE-2026-48014 Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/_action/order/{orderId}/state/{transition} and similar tr...	6.5 Medium	—	0,39%	17 Jul 2026
CVE-2026-48010 Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, UserController::upsertUser() in src/Core/Framework/Api/Controller/UserController.php writes raw us...	6.5 Medium	—	0,47%	17 Jul 2026
CVE-2026-48009 Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a low-privilege admin user with user_recovery:read ACL can take over any admin account by triggeri...	6.8 Medium	—	0,46%	17 Jul 2026
CVE-2026-48008 Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by c...	6.5 Medium	—	0,47%	17 Jul 2026
CVE-2025-59866 The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-...	3.3 Low	—	0,10%	17 Jul 2026
CVE-2026-9588 A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicemail notification template functionality. The submi...	7.0 High	—	0,41%	17 Jul 2026
CVE-2026-9587 An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input throug...	7.1 High	—	0,38%	17 Jul 2026
CVE-2026-9586 Advisory sangoma switchvox An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone...	9.8 Critical	KEV	19,0%	17 Jul 2026
CVE-2026-9585 An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). The application fails to properly sani...	8.6 High	—	0,55%	17 Jul 2026
CVE-2026-8297 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software S...	9.8 Critical	—	0,47%	17 Jul 2026
CVE-2026-63309 SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing authenticated users to leak the relative ordering of restricted field va...	4.3 Medium	—	0,33%	17 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.