Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-25272
qualcomm snapdragon g1 gen 2 gaming platform firmware, qualcomm cologne firmware +58 lainnya
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
|
6.7 Medium | — | 0,07% | 6 Okt 2026 |
|
CVE-2026-25270
qualcomm snapdragon g1 gen 2 gaming platform firmware, qualcomm cologne firmware +58 lainnya
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
|
6.7 Medium | — | 0,07% | 6 Okt 2026 |
|
CVE-2026-25269
qualcomm snapdragon g1 gen 2 gaming platform firmware, qualcomm cologne firmware +58 lainnya
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
|
6.7 Medium | — | 0,07% | 6 Okt 2026 |
|
CVE-2026-25267
qualcomm qca6698au firmware, qualcomm qca6797aq firmware +58 lainnya
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
|
7.8 High | — | 0,06% | 6 Okt 2026 |
|
CVE-2026-25263
qualcomm snapdragon g1 gen 2 gaming platform firmware, qualcomm 5g fixed wireless access platform firmware +58 lainnya
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
|
6.6 Medium | — | 0,06% | 6 Okt 2026 |
|
CVE-2026-105778
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Han...
|
9.9 Critical | — | 0,48% | 6 Okt 2026 |
|
CVE-2026-105776
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerabil...
|
7.3 High | — | 0,33% | 6 Okt 2026 |
|
CVE-2026-105701
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missin...
|
8.8 High | — | 0,55% | 6 Okt 2026 |
|
CVE-2026-97300
Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.
|
6.5 Medium | — | 0,21% | 6 Okt 2026 |
|
CVE-2026-75962
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site...
|
7.2 High | — | 0,28% | 6 Okt 2026 |
|
CVE-2026-41563
Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.
|
7.5 High | — | 0,25% | 6 Okt 2026 |
|
CVE-2026-41558
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.
|
7.5 High | — | 0,26% | 6 Okt 2026 |
|
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
|
7.5 High | — | 0,20% | 6 Okt 2026 |
|
CVE-2026-39760
Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.
|
7.1 High | — | 0,15% | 6 Okt 2026 |
|
CVE-2026-39723
Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Leve...
|
7.5 High | — | 0,20% | 6 Okt 2026 |
|
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
|
4.3 Medium | — | 0,15% | 6 Okt 2026 |
|
CVE-2026-32582
Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from...
|
6.5 Medium | — | 0,17% | 6 Okt 2026 |
|
CVE-2026-32576
Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Con...
|
6.5 Medium | — | 0,21% | 6 Okt 2026 |
|
CVE-2026-105775
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamb...
|
4.3 Medium | — | 0,30% | 6 Okt 2026 |
|
CVE-2026-105708
A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Hand...
|
4.3 Medium | — | 0,27% | 6 Okt 2026 |
|
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
|
7.5 High | — | 0,20% | 6 Okt 2026 |
|
CVE-2026-105707
A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The ma...
|
5.3 Medium | — | 0,33% | 6 Okt 2026 |
|
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request...
|
4.3 Medium | — | 0,16% | 6 Okt 2026 |
|
CVE-2026-105705
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipu...
|
4.3 Medium | — | 0,27% | 6 Okt 2026 |
|
CVE-2026-105704
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the ar...
|
7.3 High | — | 0,40% | 6 Okt 2026 |
|
CVE-2026-105703
A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem...
|
4.7 Medium | — | 0,23% | 6 Okt 2026 |
|
CVE-2026-105621
A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/...
|
5.4 Medium | — | 0,23% | 6 Okt 2026 |
|
CVE-2026-105611
A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springbla...
|
2.7 Low | — | 0,24% | 6 Okt 2026 |
|
CVE-2026-105610
A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/spr...
|
4.7 Medium | — | 0,23% | 6 Okt 2026 |
|
CVE-2026-105573
A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the c...
|
4.3 Medium | — | 0,23% | 6 Okt 2026 |
|
CVE-2026-105572
A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Su...
|
4.3 Medium | — | 0,22% | 6 Okt 2026 |
|
CVE-2026-105571
A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile...
|
7.3 High | — | 0,28% | 6 Okt 2026 |
|
CVE-2026-105487
A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the co...
|
6.3 Medium | — | 1,1% | 6 Okt 2026 |
|
CVE-2026-105486
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing...
|
7.3 High | — | 0,50% | 6 Okt 2026 |
|
CVE-2026-105484
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi...
|
10.0 Critical | — | 2,1% | 6 Okt 2026 |
|
CVE-2026-104380
Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one.
On HTTP/2 and HTTP/3 a WebSocket h...
|
5.3 Medium | — | 0,16% | 6 Okt 2026 |
|
CVE-2026-104044
A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request when passkey...
|
6.2 Medium | — | 0,12% | 6 Okt 2026 |
|
CVE-2026-104043
A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially craf...
|
5.5 Medium | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-104042
A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length...
|
5.5 Medium | — | 0,11% | 6 Okt 2026 |
|
CVE-2026-104041
A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the n...
|
5.5 Medium | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-104040
A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included...
|
4.4 Medium | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-104039
A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security Services Applicati...
|
4.7 Medium | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environ...
|
6.8 Medium | — | 0,31% | 6 Okt 2026 |
|
CVE-2026-105472
A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown functio...
|
6.3 Medium | — | 0,20% | 6 Okt 2026 |
|
CVE-2026-104038
A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In...
|
5.9 Medium | — | 0,22% | 6 Okt 2026 |
|
CVE-2026-104037
A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket...
|
5.5 Medium | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-104036
A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to a...
|
5.8 Medium | — | 0,09% | 6 Okt 2026 |
|
CVE-2026-104035
A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent c...
|
5.5 Medium | — | 0,10% | 6 Okt 2026 |
|
CVE-2026-104034
A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting ticket (TGT) renewal, w...
|
4.7 Medium | — | 0,09% | 6 Okt 2026 |
|
CVE-2026-104033
A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expir...
|
5.4 Medium | — | 0,19% | 6 Okt 2026 |