Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-76732
A local privilege-escalation vulnerability has been discovered in the affected daemon of HPE Networking Instant ON. Successful exploitation of this vulnerability could al...
|
6.4 Medium | — | 0,10% | 29 Sep 2026 |
|
CVE-2026-76731
An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentica...
|
6.5 Medium | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-76730
An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent ex...
|
6.5 Medium | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-76729
A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corru...
|
6.6 Medium | — | 0,42% | 29 Sep 2026 |
|
CVE-2026-76728
A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request fo...
|
7.2 High | — | 0,51% | 29 Sep 2026 |
|
CVE-2026-76727
Command injection vulnerabilities exist in the affected interface of HPE Networking Instant ON that could allow an authenticated remote attacker with high privileges to p...
|
7.2 High | — | 0,98% | 29 Sep 2026 |
|
CVE-2026-76726
An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls i...
|
8.1 High | — | 0,36% | 29 Sep 2026 |
|
CVE-2026-76725
A vulnerability has been identified in a management protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing...
|
9.6 Critical | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-76724
A command injection vulnerability exists in CLI of the affected HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to perform command inj...
|
9.6 Critical | — | 1,0% | 29 Sep 2026 |
|
CVE-2026-76723
Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could allow an unauthenticated adjacent attacker to achieve remote c...
|
9.6 Critical | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-76722
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arb...
|
9.8 Critical | — | 0,54% | 29 Sep 2026 |
|
CVE-2026-76721
Buffer overflow vulnerability exists in the affected interface of HPE Networking Instant ON that could allow an unauthenticated remote attacker to run arbitrary code on t...
|
9.8 Critical | — | 0,56% | 29 Sep 2026 |
|
CVE-2026-67993
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a login cross-site request forgery issue in the static credentials callback.
|
8.8 High | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-67987
crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing o...
|
7.5 High | — | 0,43% | 29 Sep 2026 |
|
CVE-2026-61519
Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability that allows any user holding a pending team invitation to invite additional attacker-control...
|
8.8 High | — | 0,38% | 29 Sep 2026 |
|
CVE-2026-53989
Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated user...
|
4.7 Medium | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-53988
Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stac...
|
10.0 Critical | — | 0,45% | 29 Sep 2026 |
|
CVE-2026-39117
An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php
|
9.8 Critical | — | 0,75% | 29 Sep 2026 |
|
CVE-2026-102879
ClaraVerse through 0.3.1 contains server-side request forgery protection bypasses in the download_file and scrape_web agent tools. Authenticated users can bypass hostname...
|
5.0 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-102878
mcp-chrome-bridge through 1.0.31 contains an origin validation error in the native-server HTTP API that allows attackers to bypass CORS restrictions. Attackers can craft...
|
8.1 High | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-102877
Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider e...
|
4.4 Medium | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102876
SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check_auth() verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB h...
|
8.1 High | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-102875
VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can...
|
7.8 High | — | 0,17% | 29 Sep 2026 |
|
CVE-2026-102331
google chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c...
|
9.6 Critical | — | 0,43% | 29 Sep 2026 |
|
CVE-2026-102330
google chrome
Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin p...
|
6.5 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-102329
google chrome
Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page...
|
6.1 Medium | — | 0,18% | 29 Sep 2026 |
|
CVE-2026-102328
google chrome
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...
|
8.8 High | — | 0,33% | 29 Sep 2026 |
|
CVE-2026-102327
google chrome
Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially...
|
7.5 High | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-102326
google chrome
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...
|
8.8 High | — | 0,33% | 29 Sep 2026 |
|
CVE-2026-102325
google chrome
Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security s...
|
4.3 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-102324
google chrome
Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbit...
|
8.3 High | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-102323
google chrome
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...
|
8.8 High | — | 0,41% | 29 Sep 2026 |
|
CVE-2026-102321
google chrome
Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec...
|
8.8 High | — | 0,34% | 29 Sep 2026 |
|
CVE-2026-102320
google chrome
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a...
|
6.5 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-102319
google chrome
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbo...
|
3.4 Low | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102318
google chrome
Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium securi...
|
4.7 Medium | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102317
google chrome
Improper privilege management in Mojo in Google Chrome on on Windows prior to 154.0.8037.92 allowed a local attacker to potentially execute arbitrary code outside the san...
|
8.6 High | — | 0,11% | 29 Sep 2026 |
|
CVE-2026-102316
google chrome
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via...
|
9.6 Critical | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-102315
google chrome
Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory ou...
|
3.4 Low | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102314
google chrome
UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severi...
|
5.4 Medium | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102313
google chrome
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page...
|
4.7 Medium | — | 0,28% | 29 Sep 2026 |
|
CVE-2026-102312
google chrome
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium se...
|
4.3 Medium | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-102311
google chrome
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outs...
|
3.4 Low | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102310
google chrome
Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy v...
|
6.5 Medium | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-102309
google chrome
Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...
|
9.6 Critical | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-102308
google chrome
Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via...
|
9.6 Critical | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-102307
google chrome
Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page....
|
4.7 Medium | — | 0,28% | 29 Sep 2026 |
|
CVE-2026-102306
google chrome
Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML...
|
9.6 Critical | — | 0,37% | 29 Sep 2026 |
|
CVE-2026-102305
google chrome
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium securit...
|
5.4 Medium | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102304
google chrome
Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro...
|
9.6 Critical | — | 0,31% | 29 Sep 2026 |