Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-39600
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI C...
|
4.7 Medium | — | 0,17% | 2 Okt 2026 |
|
CVE-2026-39444
Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control...
|
5.4 Medium | — | 0,19% | 2 Okt 2026 |
|
CVE-2026-39439
Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamu...
|
6.5 Medium | — | 0,19% | 2 Okt 2026 |
|
CVE-2026-32585
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec...
|
6.5 Medium | — | 0,17% | 2 Okt 2026 |
|
CVE-2026-32584
Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allo...
|
5.3 Medium | — | 0,20% | 2 Okt 2026 |
|
CVE-2026-104638
A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown...
|
5.3 Medium | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-104637
A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function add_patien...
|
7.3 High | — | 0,29% | 2 Okt 2026 |
|
CVE-2026-104625
A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulatio...
|
6.3 Medium | — | 0,20% | 2 Okt 2026 |
|
CVE-2026-104026
In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a tar...
|
7.8 High | — | 0,13% | 2 Okt 2026 |
|
CVE-2026-94422
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session...
|
8.8 High | — | 0,69% | 2 Okt 2026 |
|
CVE-2026-93875
The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including, 2.5.2.1 due to...
|
7.2 High | — | 0,19% | 2 Okt 2026 |
|
CVE-2026-85215
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection.
This...
|
7.1 High | — | 0,18% | 2 Okt 2026 |
|
CVE-2026-19652
The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the `dmem_form_submit_handler()` fu...
|
9.8 Critical | — | 0,33% | 2 Okt 2026 |
|
CVE-2026-104721
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an
MDC-based discrim...
|
6.3 Medium | — | 0,33% | 2 Okt 2026 |
|
CVE-2026-104614
A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/dele...
|
6.3 Medium | — | 0,20% | 2 Okt 2026 |
|
CVE-2026-104613
A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.ph...
|
6.3 Medium | — | 0,20% | 2 Okt 2026 |
|
CVE-2026-96289
Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.2...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-96287
Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade t...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-96286
Uncaught exception vulnerability in Apache Thrift Perl bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-96277
Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings.
This issue affects Apache Thrift: before 0.25.0.
Users...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-94658
Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-94657
Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are reco...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-94656
Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recomm...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-94655
Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings.
This issue affects Apache Thrift:...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-94654
Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are re...
|
8.2 High | — | 0,41% | 2 Okt 2026 |
|
CVE-2026-85476
Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are re...
|
8.2 High | — | 0,41% | 2 Okt 2026 |
|
CVE-2026-85209
Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly C...
|
6.5 Medium | — | 0,20% | 2 Okt 2026 |
|
CVE-2026-83745
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift
nodejs and D lang bindings.
Both binding...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-83663
Uncontrolled Recursion vulnerability in Apache Thrift go bindings.
Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload byt...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-83632
Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift.
This issue affects Apa...
|
9.2 Critical | — | 0,38% | 2 Okt 2026 |
|
CVE-2026-66859
NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are r...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-66858
The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust...
|
8.7 High | — | 0,26% | 2 Okt 2026 |
|
CVE-2026-66837
Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are...
|
8.7 High | — | 0,29% | 2 Okt 2026 |
|
CVE-2026-66331
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport.
This issue affects Apache Thrift: before 0.25.0...
|
6.9 Medium | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-66081
Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-66055
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings.
This issue affects Apache Thrift...
|
8.2 High | — | 0,26% | 2 Okt 2026 |
|
CVE-2026-66054
Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++ bindings.
Thi...
|
6.9 Medium | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-63772
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommen...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-61374
Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recomm...
|
7.1 High | — | 0,24% | 2 Okt 2026 |
|
CVE-2026-11795
Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting.
This issue affects E-Commerce Pack: befor...
|
5.3 Medium | — | 0,20% | 2 Okt 2026 |
|
CVE-2026-104733
User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanis...
|
7.4 High | — | 0,22% | 2 Okt 2026 |
|
CVE-2026-104612
A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/new_announcement.php of th...
|
4.3 Medium | — | 0,27% | 2 Okt 2026 |
|
CVE-2026-104611
A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler...
|
9.1 Critical | — | 0,49% | 2 Okt 2026 |
|
CVE-2026-104610
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the comp...
|
10.0 Critical | — | 0,64% | 2 Okt 2026 |
|
CVE-2026-102798
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Stored XSS.This iss...
|
6.5 Medium | — | 0,13% | 2 Okt 2026 |
|
CVE-2026-102797
Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from...
|
6.4 Medium | — | 0,14% | 2 Okt 2026 |
|
CVE-2026-96294
Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings.
This issue affects Apache Thrift: before 0.25.0.
Use...
|
8.7 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-96292
Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings.
This issue affects Apache Thrift: before 0.2...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-96288
Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings.
This issue affects Apache Thrift: before 0...
|
8.2 High | — | 0,43% | 2 Okt 2026 |
|
CVE-2026-94653
Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to...
|
8.2 High | — | 0,43% | 2 Okt 2026 |