Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-105186
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid...
|
6.3 Medium | — | 0,20% | 5 Okt 2026 |
|
CVE-2026-105185
A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of t...
|
7.3 High | — | 0,26% | 5 Okt 2026 |
|
CVE-2026-105184
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such...
|
7.3 High | — | 0,26% | 5 Okt 2026 |
|
CVE-2026-105183
A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation...
|
7.3 High | — | 0,26% | 5 Okt 2026 |
|
CVE-2026-105182
A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/ac...
|
7.3 High | — | 0,26% | 5 Okt 2026 |
|
CVE-2026-105181
A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the...
|
6.3 Medium | — | 0,20% | 5 Okt 2026 |
|
CVE-2026-20589
mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20588
mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obta...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20587
mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20586
mediatek mt8910 firmware, mediatek mt2718 firmware +23 lainnya
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges...
|
8.8 High | — | 0,38% | 5 Okt 2026 |
|
CVE-2026-20579
mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20544
mediatek mt8910 firmware, mediatek mt6739 firmware +57 lainnya
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to th...
|
6.8 Medium | — | 0,17% | 5 Okt 2026 |
|
CVE-2026-20543
mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed....
|
5.5 Medium | — | 0,12% | 5 Okt 2026 |
|
CVE-2026-20542
mediatek mt2718 firmware, mediatek mt6878 firmware +17 lainnya
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20541
mediatek mt6985 firmware, mediatek mt6986 firmware +58 lainnya
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base sta...
|
5.3 Medium | — | 0,18% | 5 Okt 2026 |
|
CVE-2026-20540
mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station...
|
5.3 Medium | — | 0,18% | 5 Okt 2026 |
|
CVE-2026-20539
mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station...
|
5.3 Medium | — | 0,18% | 5 Okt 2026 |
|
CVE-2026-20538
mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base sta...
|
5.3 Medium | — | 0,18% | 5 Okt 2026 |
|
CVE-2026-20537
mediatek mt6878 firmware, mediatek mt6881 firmware +9 lainnya
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20536
mediatek mt6878 firmware, mediatek mt6881 firmware +11 lainnya
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20535
mediatek mt8910 firmware, mediatek mt6878 firmware +10 lainnya
In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20534
mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base stat...
|
5.3 Medium | — | 0,18% | 5 Okt 2026 |
|
CVE-2026-20533
mediatek mt6739 firmware, mediatek mt6761 firmware +31 lainnya
In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obta...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20532
mediatek mt6899 firmware, mediatek mt6993 firmware +3 lainnya
In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interact...
|
6.2 Medium | — | 0,12% | 5 Okt 2026 |
|
CVE-2026-20531
mediatek mt8910 firmware, mediatek mt6899 firmware +4 lainnya
In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User...
|
8.4 High | — | 0,13% | 5 Okt 2026 |
|
CVE-2026-20530
mediatek mt2718 firmware, mediatek mt6991 firmware +9 lainnya
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtai...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20529
mediatek mt6761 firmware, mediatek mt6765 firmware +26 lainnya
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtai...
|
6.7 Medium | — | 0,11% | 5 Okt 2026 |
|
CVE-2026-20528
mediatek mt2735 firmware, mediatek mt2737 firmware +8 lainnya
In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or p...
|
6.7 Medium | — | 0,12% | 5 Okt 2026 |
|
CVE-2026-20527
mediatek mt2716 firmware, mediatek mt2735 firmware +53 lainnya
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station contr...
|
5.3 Medium | — | 0,21% | 5 Okt 2026 |
|
CVE-2026-20526
mediatek mt2716 firmware, mediatek mt2735 firmware +53 lainnya
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base...
|
7.5 High | — | 0,23% | 5 Okt 2026 |
|
CVE-2026-20525
mediatek mt2716 firmware, mediatek mt6835 firmware +20 lainnya
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station co...
|
5.3 Medium | — | 0,21% | 5 Okt 2026 |
|
CVE-2026-20524
mediatek mt6899 firmware, mediatek mt6993 firmware +4 lainnya
In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges n...
|
8.4 High | — | 0,13% | 5 Okt 2026 |
|
CVE-2026-20523
mediatek mt6881 firmware, mediatek mt6993 firmware +7 lainnya
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privil...
|
8.4 High | — | 0,13% | 5 Okt 2026 |
|
CVE-2026-20522
mediatek mt6881 firmware, mediatek mt6993 firmware +6 lainnya
In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privil...
|
8.4 High | — | 0,13% | 5 Okt 2026 |
|
CVE-2026-20521
mediatek mt8910 firmware, mediatek mt2718 firmware +46 lainnya
In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pri...
|
8.4 High | — | 0,13% | 5 Okt 2026 |
|
CVE-2026-20520
mediatek mt2716 firmware, mediatek mt2735 firmware +55 lainnya
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base...
|
7.5 High | — | 0,23% | 5 Okt 2026 |
|
CVE-2026-20519
mediatek mt6833 firmware, mediatek mt6835 firmware +55 lainnya
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base...
|
7.5 High | — | 0,23% | 5 Okt 2026 |
|
CVE-2026-105180
A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing...
|
6.3 Medium | — | 0,30% | 5 Okt 2026 |
|
CVE-2026-105179
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password...
|
2.7 Low | — | 0,15% | 5 Okt 2026 |
|
CVE-2026-105178
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/ad...
|
4.7 Medium | — | 0,32% | 5 Okt 2026 |
|
CVE-2026-105177
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the compon...
|
4.7 Medium | — | 0,32% | 5 Okt 2026 |
|
CVE-2026-105176
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of t...
|
4.7 Medium | — | 0,32% | 5 Okt 2026 |
|
CVE-2026-105295
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TL...
|
7.5 High | — | 0,13% | 5 Okt 2026 |
|
CVE-2026-105294
Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord setting...
|
7.4 High | — | 0,19% | 5 Okt 2026 |
|
CVE-2026-105293
Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvali...
|
8.1 High | — | 0,38% | 5 Okt 2026 |
|
CVE-2026-105292
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without...
|
5.9 Medium | — | 0,16% | 5 Okt 2026 |
|
CVE-2026-105223
maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-aut...
|
7.4 High | — | 0,20% | 5 Okt 2026 |
|
CVE-2026-105175
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component...
|
7.3 High | — | 0,25% | 5 Okt 2026 |
|
CVE-2026-105174
A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Pro...
|
5.4 Medium | — | 0,33% | 5 Okt 2026 |
|
CVE-2026-105173
A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of...
|
3.5 Low | — | 0,20% | 5 Okt 2026 |