Katalog CVE (hal. 959)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.603 (Critical 36.783 · High 106.969 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 47.901–47.950 dari 267.603 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-46459 ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full fac...	5.3 Medium	—	0,43%	15 Jul 2026
CVE-2026-46458 ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated rem...	7.1 High	—	0,36%	15 Jul 2026
CVE-2026-15809 A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment vari...	7.8 High	—	0,18%	15 Jul 2026
CVE-2026-15779 A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical s...	6.1 Medium	—	0,15%	15 Jul 2026
CVE-2026-61873 Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is validated against path traversal before Tw...	8.1 High	—	0,31%	15 Jul 2026
CVE-2026-61872 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry pa...	2.5 Low	—	0,10%	15 Jul 2026
CVE-2026-61871 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that trigg...	3.7 Low	—	0,35%	15 Jul 2026
CVE-2026-61869 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, which can le...	2.9 Low	—	0,10%	15 Jul 2026
CVE-2026-61868 ImageMagick before 7.1.2-26 and 6.9.x before 6.9.13-51 contains a memory leak in the YUV decoder that occurs when opening of the blob fails. Repeated triggering can lead...	3.7 Low	—	0,22%	15 Jul 2026
CVE-2026-61867 ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF i...	2.9 Low	—	0,14%	15 Jul 2026
CVE-2026-61866 imagemagick ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malfo...	7.5 High	—	0,19%	15 Jul 2026
CVE-2026-61865 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the hough lines operation: when a specific operation fails, a small memory leak occurs.	2.9 Low	—	0,10%	15 Jul 2026
CVE-2026-61864 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace: when the operation fails, a small amount of memory is not...	2.9 Low	—	0,10%	15 Jul 2026
CVE-2026-61863 imagemagick ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a smal...	7.5 High	—	0,19%	15 Jul 2026
CVE-2026-61862 ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is...	2.9 Low	—	0,11%	15 Jul 2026
CVE-2026-61860 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues t...	3.7 Low	—	0,35%	15 Jul 2026
CVE-2026-61859 imagemagick ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks. This allo...	3.3 Low	—	0,17%	15 Jul 2026
CVE-2026-61464 ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with a crafted window title, which...	1.8 Low	—	0,09%	15 Jul 2026
CVE-2026-61457 The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controller. HandlesMediaUploads::validateFileExtension...	8.8 High	—	0,61%	15 Jul 2026
CVE-2026-61453 Grav v2.0.0 contains a cross-site scripting vulnerability (fixed in 2.0.1). The XSS blueprint validator (Security::detectXss()) runs on raw page content before Twig proce...	6.1 Medium	—	0,20%	15 Jul 2026
CVE-2026-61452 The Grav API plugin (getgrav/grav-plugin-api) before 2.0.4 contains an improper session invalidation vulnerability where JWT access tokens are issued without a jti (JWT I...	5.3 Medium	—	0,24%	15 Jul 2026
CVE-2026-61451 The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field in the POST /api/v1/auth/forgot-password endpo...	9.6 Critical	—	0,31%	15 Jul 2026
CVE-2026-61449 Grav 2.0.1 contains a decompression-bomb size-cap bypass in ZipArchiver and GPM\Installer. The size bound introduced in 2.0.1 sums the uncompressed size declared in each...	6.5 Medium	—	0,30%	15 Jul 2026
CVE-2026-61446 PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python (.py) files from...	8.4 High	—	0,34%	15 Jul 2026
CVE-2026-61443 PraisonAI before 1.6.78 contains a remote code execution vulnerability in SkillTools.run_skill_script() that executes scripts without path containment validation. Attacke...	8.1 High	—	0,64%	15 Jul 2026
CVE-2026-61440 PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or rem...	6.5 Medium	—	0,26%	15 Jul 2026
CVE-2026-61438 PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python() due to insufficient AST validation of workflow script...	7.3 High	—	0,31%	15 Jul 2026
CVE-2026-61436 PraisonAI before 4.6.78 fails to verify Svix webhook signatures in AgentMail webhook mode, allowing unauthenticated attackers to forge message.received events. Attackers...	8.6 High	—	0,39%	15 Jul 2026
CVE-2026-61435 PraisonAI before 4.6.78 contains an authentication bypass in the Call API agent invocation endpoints (src/praisonai/praisonai/api/agent_invoke.py) when PRAISONAI_CALL_AUT...	8.2 High	—	0,49%	15 Jul 2026
CVE-2026-61433 PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python e...	7.8 High	—	0,21%	15 Jul 2026
CVE-2026-61430 PraisonAI before 1.6.78 contains a server-side request forgery vulnerability in the web_crawl tool that validates hostnames at check time but re-resolves them at connecti...	8.5 High	—	0,25%	15 Jul 2026
CVE-2026-61427 PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key option defaults to None, and the server only enforces A...	7.3 High	—	0,43%	15 Jul 2026
CVE-2026-60087 PraisonAI before 1.6.78 caches tool approval decisions by tool name only, allowing attackers to reuse initial approvals for subsequent calls with arbitrary arguments. Att...	6.1 Medium	—	0,34%	15 Jul 2026
CVE-2026-60085 PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_impo...	7.5 High	—	0,26%	15 Jul 2026
CVE-2026-59259 n8n n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caused by a mismatch between the static validatio...	6.5 Medium	—	0,44%	15 Jul 2026
CVE-2026-59254 n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow node expressions outside credentials scope....	6.3 Medium	—	0,36%	15 Jul 2026
CVE-2026-59236 Authorization Bypass Through User-Controlled Key (CWE-639) in the Excel import handlers (CustomerImport, LeadImport, ProductImport) in Roskus Prospero Flow CRM before 5.1...	6.9 Medium	—	0,64%	15 Jul 2026
CVE-2026-58655 The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynami...	8.8 High	—	1,4%	15 Jul 2026
CVE-2026-57996 phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in the user/add API endpoint that allows non-SuperAdmin administrators to create SuperAdmin accounts....	8.8 High	—	0,44%	15 Jul 2026
CVE-2026-56764 Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual f...	3.7 Low	—	0,30%	15 Jul 2026
CVE-2026-56400 openwebui open webui open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/...	9.6 Critical	—	0,52%	15 Jul 2026
CVE-2026-56398 openwebui open webui Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file...	9.0 Critical	—	0,64%	15 Jul 2026
CVE-2026-56375 ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resourc...	3.3 Low	—	0,15%	15 Jul 2026
CVE-2026-56353 n8n n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). In affected releases — before 1.123.22, t...	4.8 Medium	—	0,33%	15 Jul 2026
CVE-2026-56352 n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the f...	6.4 Medium	—	0,33%	15 Jul 2026
CVE-2026-56349 n8n before version 2.10.0 contains an input validation vulnerability in the Guardrail node that allows attackers to bypass default guardrail instructions. End users can c...	6.3 Medium	—	0,47%	15 Jul 2026
CVE-2026-56339 Capgo (Cap-go/capgo) before 12.128.2 contains an information disclosure vulnerability in the Supabase PostgREST SECURITY DEFINER RPC function public.rescind_invitation th...	7.5 High	—	0,36%	15 Jul 2026
CVE-2026-59235 Missing Authorization (CWE-862) in BankAccountListController (app/Http/Controllers/Api/BankAccount/BankAccountListController.php), exposed at GET /api/bank-account, in Pr...	8.7 High	—	0,66%	15 Jul 2026
CVE-2026-40633 dell powerscale onefs Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A...	5.5 Medium	—	0,16%	15 Jul 2026
CVE-2026-58077 Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2 - The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A speci...	8.7 High	—	0,44%	15 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.