Katalog CVE (hal. 957)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 47.801–47.850 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-12997 The Gravity Forms plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.10.4 via the 'gform_uploaded_files' parameter paramete...	7.5 High	—	0,93%	15 Jul 2026
CVE-2026-62948 openwrt OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through sr...	9.6 Critical	—	0,58%	15 Jul 2026
CVE-2026-61643 FastGPT is a knowledge-based AI application platform. From 4.14.17 until 4.15.0-beta5, an authenticated FastGPT user can save a workflow node that points to another user'...	5.9 Medium	—	0,19%	15 Jul 2026
CVE-2026-59258 immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoint that allows shared album editors to modify member roles wi...	8.3 High	—	0,46%	15 Jul 2026
CVE-2026-59255 BloodHound through 9.4.0, fixed in commit 8f79035, contains a missing authorization vulnerability in the custom-nodes API endpoints that allows any authenticated user to...	7.1 High	—	0,44%	15 Jul 2026
CVE-2026-58660 Kanboard before 1.2.53, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller's role on the at...	8.1 High	—	0,50%	15 Jul 2026
CVE-2026-58659 lightningai pytorch lightning PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-co...	7.8 High	—	0,63%	15 Jul 2026
CVE-2026-58658 GPUStack through 2.2.1, fixed in commit 4e20551, contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to access sensitiv...	8.2 High	—	0,54%	15 Jul 2026
CVE-2026-56687 Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit thi...	7.8 High	—	0,15%	15 Jul 2026
CVE-2026-56087 Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could potentially exploit this vulne...	6.1 Medium	—	0,21%	15 Jul 2026
CVE-2026-53518 better-auth/oauth-provider, better-auth better auth Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the au...	8.1 High	—	0,41%	15 Jul 2026
CVE-2026-53517 better-auth/oauth-provider, better-auth better auth Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on...	8.1 High	—	0,42%	15 Jul 2026
CVE-2026-53516 better-auth better auth Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts imp...	8.3 High	—	0,29%	15 Jul 2026
CVE-2026-53515 better-auth/sso, better-auth better auth Better Auth is an authentication and authorization library for TypeScript. From 1.2.10 until 1.6.11, the @better-auth/sso plugin's POST /sso/register endpoint lets any or...	7.1 High	—	0,43%	15 Jul 2026
CVE-2026-53514 better-auth better auth Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside the invite...	7.7 High	—	0,20%	15 Jul 2026
CVE-2026-53513 better-auth/sso, better-auth better auth Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST /sso/update-provider...	9.6 Critical	—	0,25%	15 Jul 2026
CVE-2026-53512 better-auth better auth Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth token endpoints whose ref...	9.1 Critical	—	0,28%	15 Jul 2026
CVE-2026-50562 FastGPT is a knowledge-based AI application platform. At commit 22ebfacbb43311e9b73294040ae0eb87390c6bba and earlier, artifacts built from untrusted pull request code in...	9.3 Critical	—	0,21%	15 Jul 2026
CVE-2026-45337 better-auth better auth Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the deviceAuthorization plugin treats any authenticated session as the...	7.6 High	—	0,21%	15 Jul 2026
CVE-2026-40501 Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execu...	8.8 High	—	0,81%	15 Jul 2026
CVE-2026-20298 splunk, splunk cloud platform In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and...	6.5 Medium	—	0,32%	15 Jul 2026
CVE-2026-20297 splunk, splunk cloud platform In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.2.2510.18, and 10.1....	7.2 High	—	0,57%	15 Jul 2026
CVE-2026-20296 splunk, splunk cloud platform In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.7, 10.3.2512.16, 10.2.2510.18, and...	8.3 High	—	0,18%	15 Jul 2026
CVE-2026-14961 Pegatron `Tdelo64.sys` exposes a privileged device interface, `\\.\TdeIo`, that fails to properly restrict access to sensitive IOCTL functionality. The driver's IOCTL dis...	6.2 Medium	—	0,16%	15 Jul 2026
CVE-2026-14960 Pegatron `Tdelo64.sys` improperly exposes privileged hardware access functionality through the `\\.\TdeIo` device interface. IOCTL handlers including `TDE_IOCTL_INDEXIO_R...	9.8 Critical	—	0,46%	15 Jul 2026
CVE-2026-12382 A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despi...	8.2 High	—	0,46%	15 Jul 2026
CVE-2026-10673 zephyrproject zephyr The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver (drivers/ethernet/eth_adin2111.c) reassembles received Ethernet frames in OPEN Alliance (OA) SPI mode by copyi...	8.8 High	—	0,42%	15 Jul 2026
CVE-2026-62378 RustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 until 0.1.10, the RustFS Console components/object/preview-modal.tsx and com...	9.0 Critical	—	0,42%	15 Jul 2026
CVE-2026-59955 Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthor...	7.5 High	—	0,57%	15 Jul 2026
CVE-2026-59954 Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.2, Apollo ConfigService may allow unauthor...	7.5 High	—	0,57%	15 Jul 2026
CVE-2026-52843 Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpanda fetch() and XMLHttpRequest unconditionally attached session cookies to every H...	9.3 Critical	—	0,23%	15 Jul 2026
CVE-2026-52842 Lightpanda is a headless browser designed for AI and automation. Prior to 0.3.1, Lightpanda searched for @ across the entire URL string instead of only the authority comp...	9.3 Critical	—	0,25%	15 Jul 2026
CVE-2026-49997 SurrealDB is a scalable, distributed, collaborative, document-graph database for the realtime web. Prior to 3.1.0, Document::purge_edges in surrealdb/core/src/doc/delete....	5.4 Medium	—	0,35%	15 Jul 2026
CVE-2026-48799 Postiz is an AI social media scheduling tool. Prior to 2.21.8, Postiz fails to verify Nowpayments IPN callback authenticity against the payment provider shared secret and...	7.7 High	—	0,22%	15 Jul 2026
CVE-2026-47703 adguardhome AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced...	5.3 Medium	—	0,14%	15 Jul 2026
CVE-2026-45804 huggingface diffusers Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard beca...	7.5 High	—	0,37%	15 Jul 2026
CVE-2026-45793 Composer is a dependency Manager for the PHP language. Prior to 1.10.28, 2.2.28, and 2.9.8, Composer\IO\BaseIO::loadConfiguration() validates GitHub OAuth tokens with the...	7.5 High	—	1,0%	15 Jul 2026
CVE-2026-20187 cisco roomos, cisco roomos cloud As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review....	7.5 High	—	0,47%	15 Jul 2026
CVE-2026-20158 cisco roomos, cisco roomos cloud As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review....	7.5 High	—	0,47%	15 Jul 2026
CVE-2026-20157 cisco roomos, cisco roomos cloud As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review....	9.8 Critical	—	0,19%	15 Jul 2026
CVE-2026-20156 cisco roomos, cisco roomos cloud As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review....	9.8 Critical	—	0,46%	15 Jul 2026
CVE-2026-20153 cisco roomos, cisco roomos cloud As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review....	7.5 High	—	0,47%	15 Jul 2026
CVE-2026-20150 cisco roomos, cisco roomos cloud As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review....	8.8 High	—	0,42%	15 Jul 2026
CVE-2026-20146 cisco identity services engine passive identity connector, cisco identity services engine A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform path t...	5.5 Medium	—	0,50%	15 Jul 2026
CVE-2026-1563 pega platform Pega Platform versions 8.1.0 through 25.1.2 are affected by an Reflected Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privilege...	4.8 Medium	—	0,24%	15 Jul 2026
CVE-2026-1562 pega platform Pega Platform versions 8.1.0 through 25.1.2 are affected by an Stored Cross-site scripting (XSS) vulnerability in a user interface component. Requires a high privileged u...	4.8 Medium	—	0,24%	15 Jul 2026
CVE-2025-32781 Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify applicati...	6.5 Medium	—	0,42%	15 Jul 2026
CVE-2026-9007 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Site Scripting...	5.5 Medium	—	0,44%	15 Jul 2026
CVE-2026-62843 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Brow...	6.8 Medium	—	0,39%	15 Jul 2026
CVE-2026-62685 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser bu...	8.1 High	—	0,55%	15 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.