Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-76114
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticat...
|
5.9 Medium | — | 0,14% | 29 Sep 2026 |
|
CVE-2026-7193
A vulnerability relating to the use of predefined credentials in the Dbit T-CPE301K 4G WiFi mini-router allows an attacker connected to the same network to gain full root...
|
8.6 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-7192
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service (DoS) and a system rebo...
|
9.3 Critical | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-73599
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthen...
|
5.4 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-73598
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low pri...
|
7.8 High | — | 0,08% | 29 Sep 2026 |
|
CVE-2026-102437
OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation) in esengine DeepSeek-Reasonix (Reasonix Studio) allows a local attacker who controls rep...
|
7.8 High | — | 0,99% | 29 Sep 2026 |
|
CVE-2026-101271
OAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually disabled.
|
2.1 Low | — | 0,17% | 29 Sep 2026 |
|
CVE-2026-101270
Malicious HTML content could be injected into the help texts of various fields with organizer permissions.
|
2.1 Low | — | 0,19% | 29 Sep 2026 |
|
CVE-2026-101269
The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users...
|
2.3 Low | — | 0,22% | 29 Sep 2026 |
|
CVE-2026-101268
If an attacker is able to convince a victim on a specially crafted link, the victim is logged in to the attacker's customer account. If the victim does not notice this, t...
|
1.7 Low | — | 0,20% | 29 Sep 2026 |
|
CVE-2026-101267
A missing permission check allowed low-privileged users with access to an event but without access to the event's orders to extract some specific information. This inform...
|
2.7 Low | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-100832
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Fire...
|
8.8 High | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-100831
mozilla firefox, mozilla thunderbird
Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.8 High | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-100830
mozilla firefox, mozilla thunderbird
Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.1 High | — | 0,14% | 29 Sep 2026 |
|
CVE-2026-100829
mozilla firefox, mozilla thunderbird
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
9.6 Critical | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-100828
mozilla firefox, mozilla thunderbird
Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
9.6 Critical | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-100826
mozilla firefox, mozilla thunderbird
Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
6.5 Medium | — | 0,22% | 29 Sep 2026 |
|
CVE-2026-100825
mozilla firefox, mozilla thunderbird
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.8 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-100824
mozilla firefox, mozilla thunderbird
Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.8 High | — | 0,22% | 29 Sep 2026 |
|
CVE-2026-100823
mozilla firefox mobile
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 157.
|
5.4 Medium | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-100822
mozilla firefox, mozilla thunderbird
Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
5.4 Medium | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-100821
mozilla firefox, mozilla thunderbird
Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fire...
|
4.7 Medium | — | 0,14% | 29 Sep 2026 |
|
CVE-2026-100820
Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157,...
|
8.8 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-100819
Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunde...
|
9.6 Critical | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-100818
mozilla firefox, mozilla thunderbird
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153...
|
9.6 Critical | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-100817
mozilla firefox, mozilla thunderbird
Other issue in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
5.4 Medium | — | 0,20% | 29 Sep 2026 |
|
CVE-2026-100816
mozilla firefox, mozilla thunderbird
Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.1 High | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-100815
mozilla firefox, mozilla thunderbird
Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.8 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-100814
mozilla firefox, mozilla thunderbird
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox...
|
8.8 High | — | 0,24% | 29 Sep 2026 |
|
CVE-2026-100813
mozilla firefox, mozilla thunderbird
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
8.8 High | — | 0,23% | 29 Sep 2026 |
|
CVE-2026-100812
mozilla firefox, mozilla thunderbird
Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
6.5 Medium | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-100811
mozilla firefox, mozilla thunderbird
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbir...
|
9.6 Critical | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-100810
mozilla firefox, mozilla thunderbird
Other issue in the DevTools component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
9.8 Critical | — | 0,38% | 29 Sep 2026 |
|
CVE-2026-100809
mozilla firefox, mozilla thunderbird
Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.1 High | — | 0,15% | 29 Sep 2026 |
|
CVE-2026-100808
mozilla firefox, mozilla thunderbird
Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.8 High | — | 0,30% | 29 Sep 2026 |
|
CVE-2026-100807
Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Fir...
|
8.8 High | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-100806
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
4.3 Medium | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-100805
Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
7.5 High | — | 0,22% | 29 Sep 2026 |
|
CVE-2026-100804
Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
9.6 Critical | — | 0,30% | 29 Sep 2026 |
|
CVE-2026-100803
Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firef...
|
8.1 High | — | 0,19% | 29 Sep 2026 |
|
CVE-2026-100802
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
4.3 Medium | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-100801
Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157...
|
8.8 High | — | 0,25% | 29 Sep 2026 |
|
CVE-2026-100800
Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and F...
|
9.6 Critical | — | 0,31% | 29 Sep 2026 |
|
CVE-2026-100799
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
4.3 Medium | — | 0,26% | 29 Sep 2026 |
|
CVE-2026-100798
Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
|
8.1 High | — | 0,20% | 29 Sep 2026 |
|
CVE-2026-100797
Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, T...
|
8.8 High | — | 0,27% | 29 Sep 2026 |
|
CVE-2026-100796
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
8.8 High | — | 0,30% | 29 Sep 2026 |
|
CVE-2026-100795
Denial-of-service in the Networking component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
6.5 Medium | — | 0,28% | 29 Sep 2026 |
|
CVE-2026-100794
Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird...
|
9.6 Critical | — | 0,34% | 29 Sep 2026 |
|
CVE-2026-100793
JIT miscompilation in the JavaScript Engine component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.
|
6.5 Medium | — | 0,29% | 29 Sep 2026 |