Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-105866
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker wh...
|
7.5 High | — | 0,37% | 6 Okt 2026 |
|
CVE-2026-105865
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can...
|
8.1 High | — | 0,38% | 6 Okt 2026 |
|
CVE-2026-105864
payloadcms payload
Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34...
|
4.3 Medium | — | 0,19% | 6 Okt 2026 |
|
CVE-2026-105863
payloadcms payload
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved aut...
|
9.4 Critical | — | 0,38% | 6 Okt 2026 |
|
CVE-2026-105862
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downl...
|
8.7 High | — | 0,27% | 6 Okt 2026 |
|
CVE-2026-105861
payloadcms payload
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can for...
|
8.2 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-105860
payloadcms payload
Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34...
|
7.1 High | — | 0,19% | 6 Okt 2026 |
|
CVE-2026-105859
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a reque...
|
9.8 Critical | — | 0,35% | 6 Okt 2026 |
|
CVE-2026-105858
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the publi...
|
8.1 High | — | 0,48% | 6 Okt 2026 |
|
CVE-2026-105857
payloadcms payload
Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34...
|
10.0 Critical | — | 0,43% | 6 Okt 2026 |
|
CVE-2026-105856
payloadcms payload
Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collecti...
|
8.3 High | — | 0,29% | 6 Okt 2026 |
|
CVE-2026-105855
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to enforce a...
|
7.1 High | — | 0,25% | 6 Okt 2026 |
|
CVE-2026-105854
payloadcms payload
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipa...
|
7.5 High | — | 0,35% | 6 Okt 2026 |
|
CVE-2026-105853
payloadcms payload
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh respo...
|
6.5 Medium | — | 0,26% | 6 Okt 2026 |
|
CVE-2026-105852
payloadcms payload
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection...
|
7.5 High | — | 0,27% | 6 Okt 2026 |
|
CVE-2026-105851
payloadcms payload
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate opera...
|
8.1 High | — | 0,25% | 6 Okt 2026 |
|
CVE-2026-105850
payloadcms payload
Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, u...
|
8.2 High | — | 0,31% | 6 Okt 2026 |
|
CVE-2026-105849
payloadcms payload
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users with ordinary...
|
8.3 High | — | 0,30% | 6 Okt 2026 |
|
CVE-2026-105848
payloadcms payload
Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an a...
|
9.6 Critical | — | 0,24% | 6 Okt 2026 |
|
CVE-2026-105847
payloadcms payload
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can quer...
|
6.5 Medium | — | 0,24% | 6 Okt 2026 |
|
CVE-2026-105846
payloadcms payload
Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can cr...
|
6.1 Medium | — | 0,22% | 6 Okt 2026 |
|
CVE-2026-104850
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the S...
|
7.5 High | — | 0,18% | 6 Okt 2026 |
|
CVE-2026-104070
The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields b...
|
9.8 Critical | — | 0,57% | 6 Okt 2026 |
|
CVE-2025-71384
Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStat...
|
6.7 Medium | — | 0,17% | 6 Okt 2026 |
|
CVE-2025-71383
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field...
|
9.8 Critical | — | 0,36% | 6 Okt 2026 |
|
CVE-2026-76105
Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access co...
|
7.7 High | — | 0,16% | 6 Okt 2026 |
|
CVE-2026-70411
Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC...
|
7.1 High | — | 0,32% | 6 Okt 2026 |
|
CVE-2026-67273
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privile...
|
9.6 Critical | — | 0,42% | 6 Okt 2026 |
|
CVE-2026-67270
Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated...
|
8.2 High | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-63691
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unau...
|
6.1 Medium | — | 0,23% | 6 Okt 2026 |
|
CVE-2026-63690
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-...
|
5.4 Medium | — | 0,30% | 6 Okt 2026 |
|
CVE-2026-63689
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with rem...
|
6.5 Medium | — | 0,22% | 6 Okt 2026 |
|
CVE-2026-61411
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with rem...
|
7.7 High | — | 0,38% | 6 Okt 2026 |
|
CVE-2026-26287
External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.10.0 and prior to...
|
7.1 High | — | 0,24% | 6 Okt 2026 |
|
CVE-2026-105950
A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/San...
|
3.5 Low | — | 0,24% | 6 Okt 2026 |
|
CVE-2026-105845
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user w...
|
9.8 Critical | — | 0,38% | 6 Okt 2026 |
|
CVE-2026-105844
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated...
|
9.3 Critical | — | 0,52% | 6 Okt 2026 |
|
CVE-2026-105806
Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP AP...
|
8.6 High | — | 0,25% | 6 Okt 2026 |
|
CVE-2026-105805
Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can quer...
|
6.9 Medium | — | 0,28% | 6 Okt 2026 |
|
CVE-2026-105804
Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and canary versions from 4.0.0-canary.0 before 4.0.0-canar...
|
5.7 Medium | — | 0,08% | 6 Okt 2026 |
|
CVE-2026-67269
dell container storage modules
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resou...
|
9.9 Critical | — | 0,53% | 6 Okt 2026 |
|
CVE-2026-63692
dell container storage modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote...
|
10.0 Critical | — | 0,65% | 6 Okt 2026 |
|
CVE-2026-63688
dell container storage modules
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gR...
|
10.0 Critical | — | 0,79% | 6 Okt 2026 |
|
CVE-2026-61421
dell container storage modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker...
|
9.8 Critical | — | 0,34% | 6 Okt 2026 |
|
CVE-2026-54472
dell container storage modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remo...
|
7.5 High | — | 0,51% | 6 Okt 2026 |
|
CVE-2026-105922
vllm
A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/util...
|
4.3 Medium | — | 0,31% | 6 Okt 2026 |
|
CVE-2026-105921
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file sea...
|
6.3 Medium | — | 0,20% | 6 Okt 2026 |
|
CVE-2026-105801
openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before...
|
8.4 High | — | 0,14% | 6 Okt 2026 |
|
CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or names...
|
3.7 Low | — | 0,29% | 6 Okt 2026 |
|
CVE-2026-105799
LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG f...
|
2.3 Low | — | 0,28% | 6 Okt 2026 |