Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-84414
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled fi...
|
7.8 High | — | 0,09% | 29 Sep 2026 |
|
CVE-2026-12345
The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic l...
|
5.9 Medium | — | 0,18% | 29 Sep 2026 |
|
CVE-2026-102811
Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unau...
|
7.5 High | — | 0,66% | 29 Sep 2026 |
|
CVE-2026-102810
Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files....
|
7.5 High | — | 0,39% | 29 Sep 2026 |
|
CVE-2026-102809
PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Atta...
|
6.5 Medium | — | 0,48% | 29 Sep 2026 |
|
CVE-2026-102808
PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without validation bef...
|
6.5 Medium | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-102807
OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute MCP App tools requiring...
|
5.3 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-102806
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed...
|
6.3 Medium | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102762
The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver'...
|
8.2 High | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102761
NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's upper bound belongs to t...
|
9.3 Critical | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102760
When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the...
|
8.3 High | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102759
NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secure_verify_mac`, a decrypted application record who...
|
6.3 Medium | — | 0,16% | 29 Sep 2026 |
|
CVE-2026-102758
The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive underneath all X.509 certifi...
|
7.5 High | — | 0,17% | 29 Sep 2026 |
|
CVE-2026-102757
An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the...
|
8.5 High | — | 0,10% | 29 Sep 2026 |
|
CVE-2026-102730
Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND flash-translation-layer meta...
|
8.6 High | — | 0,12% | 29 Sep 2026 |
|
CVE-2026-102729
`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id. A theme id at or past...
|
5.9 Medium | — | 0,12% | 29 Sep 2026 |
|
CVE-2026-102728
Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Bo...
|
7.5 High | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102727
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
|
6.0 Medium | — | 0,20% | 29 Sep 2026 |
|
CVE-2026-102726
Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read
|
6.0 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102725
Out-of-bounds Read from Unvalidated MSRP Attribute List Length
|
6.0 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102724
NULL Pointer Dereference When Evicting the Sole MSRP Attribute
|
6.0 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102723
NULL Pointer Dereference on MSRP Attribute Table Exhaustion
|
6.0 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102722
In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and the non-zero values, thus a mali...
|
6.9 Medium | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the
received datagram.
Each receive path checks only that the datagra...
|
6.9 Medium | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102720
A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a
kilobyte past the end of the received message.
The option walk ke...
|
5.3 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102719
Predictable DTLS HelloVerifyRequest Cookie in NetX Secure
|
6.3 Medium | — | 0,21% | 29 Sep 2026 |
|
CVE-2026-102718
hey,
`_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when the OID uses BER mul...
|
8.7 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-102716
An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests
that carry a Session header the parser cannot convert.
The Session...
|
8.7 High | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102715
Any host on the LAN can send two mDNS records and make the responder write past the end of its
transmit packet.
The string table stores each name in a slot rounded...
|
7.1 High | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102714
`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`). An area whose size leaves a one- or two-by...
|
7.1 High | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-102713
The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than
four bytes (nxd_tftp_server.c:1037) and nothing anywhere checks an u...
|
8.8 High | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-102712
On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the
ciphersuite-list length against the total record length instead o...
|
8.8 High | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-102711
Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via `_txm_module_manager_memory_load` / `_txm_module_ma...
|
5.7 Medium | — | 0,08% | 29 Sep 2026 |
|
CVE-2026-102710
Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE_EVENT_TRAC...
|
9.3 Critical | — | 0,10% | 29 Sep 2026 |
|
CVE-2026-102709
Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to...
|
8.4 High | — | 0,10% | 29 Sep 2026 |
|
CVE-2026-102677
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and 44.0.0-beta.6, Electron's s...
|
8.8 High | — | 0,10% | 29 Sep 2026 |
|
CVE-2026-102639
MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB deserialization logic that allows unprivileged databa...
|
6.5 Medium | — | 0,32% | 29 Sep 2026 |
|
CVE-2026-102560
gnome libsoup, redhat enterprise linux
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray gro...
|
9.8 Critical | — | 0,42% | 29 Sep 2026 |
|
CVE-2026-102559
gnome libsoup, redhat enterprise linux
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could b...
|
8.6 High | — | 0,40% | 29 Sep 2026 |
|
CVE-2026-102558
gnome libsoup, redhat enterprise linux
A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled f...
|
8.6 High | — | 0,39% | 29 Sep 2026 |
|
CVE-2026-102555
gnome libsoup, redhat enterprise linux
A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_i...
|
8.2 High | — | 0,37% | 29 Sep 2026 |
|
CVE-2026-102242
Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a remote authe...
|
8.6 High | — | 0,37% | 29 Sep 2026 |
|
CVE-2026-92232
joomla!
Joomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The cleanAttribute me...
|
6.5 Medium | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-92231
joomla!
Joomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The checkAttribute method normal...
|
6.7 Medium | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-92227
joomla!
Joomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The premature issuance of an rememberme cooki...
|
7.5 High | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-92226
joomla!
Joomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized...
|
6.0 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-92225
joomla!
Joomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not properly escape user supplied values, leading to...
|
6.7 Medium | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-92224
joomla!
Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an X...
|
6.7 Medium | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-92223
joomla!
Joomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users...
|
3.8 Low | — | 0,16% | 29 Sep 2026 |
|
CVE-2026-92222
joomla!
Joomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for serverside requests were improperly validate...
|
8.0 High | — | 0,24% | 29 Sep 2026 |