Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-61811
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the _getattributes() funct...
|
6.5 Medium | — | 0,37% | 24 Sep 2026 |
|
CVE-2026-61788
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to version 0.22.6, setting `readonly = true` on the `execute_sql` tool does...
|
7.4 High | — | 0,30% | 24 Sep 2026 |
|
CVE-2026-61784
xhtml-purifier is a Node.js library to take in raw/unknown/untrusted HTML and output cleaned, purified, trusted HTML. Versions prior to 0.4.3 do not HTML-entity-encode at...
|
6.1 Medium | — | 0,17% | 24 Sep 2026 |
|
CVE-2026-61782
Rsdoctor is a build analyzer tailored for projects built with Rspack. Prior to version 1.5.16, the default Rsdoctor report HTTP server started by `@rsdoctor/rspack-plugin...
|
7.5 High | — | 0,36% | 24 Sep 2026 |
|
CVE-2026-61742
DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Versions prior to 0.22.5 expose an unauthenticated HTTP MCP endpoint when started...
|
9.3 Critical | — | 0,20% | 24 Sep 2026 |
|
CVE-2026-61741
http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders used a `javax...
|
9.3 Critical | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-61732
Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — in...
|
10.0 Critical | — | 1,2% | 24 Sep 2026 |
|
CVE-2026-61604
The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that was resolved...
|
9.3 Critical | — | 0,27% | 24 Sep 2026 |
|
CVE-2026-57179
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted `partial_token` as a bearer c...
|
4.2 Medium | — | 0,16% | 24 Sep 2026 |
|
CVE-2026-57178
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback data without verifying...
|
7.4 High | — | 0,16% | 24 Sep 2026 |
|
CVE-2026-57177
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the authenticati...
|
4.3 Medium | — | 0,11% | 24 Sep 2026 |
|
CVE-2026-57176
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend user_id as the social-aut...
|
6.8 Medium | — | 0,22% | 24 Sep 2026 |
|
CVE-2026-57175
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service e...
|
6.4 Medium | — | 0,23% | 24 Sep 2026 |
|
CVE-2026-54461
Habitica is a habit tracker application that treats goals like a role-playing game. From 4.172.1 until 5.48.2, a query parameter on Habitica's /api/v3/groups/:groupId/mem...
|
6.5 Medium | — | 0,30% | 24 Sep 2026 |
|
CVE-2026-97520
In the Linux kernel, the following vulnerability has been resolved:
gfs2: move quota_init qc iterator increment
Move qc++ from the loop body into the for-loop increment...
|
7.1 High | — | 0,12% | 24 Sep 2026 |
|
CVE-2026-97513
In the Linux kernel, the following vulnerability has been resolved:
media: chips-media: wave5: Release m2m_ctx after Instance Removed from List
Possible use after free...
|
7.8 High | — | 0,11% | 24 Sep 2026 |
|
CVE-2026-97509
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Keep XDomain reference during the lifetime of a service
This is needed because we relea...
|
8.8 High | — | 0,24% | 24 Sep 2026 |
|
CVE-2026-97508
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Set tb->root_switch to NULL when domain is stopped
Similarly what we do with the firmwa...
|
7.5 High | — | 0,22% | 24 Sep 2026 |
|
CVE-2026-97497
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id
allocate_sdma_queue has an option w...
|
7.8 High | — | 0,13% | 24 Sep 2026 |
|
CVE-2026-97496
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix OOB memory exposure in get_wave_state()
The get_wave_state() function for v9 trusts...
|
7.1 High | — | 0,13% | 24 Sep 2026 |
|
CVE-2026-97478
In the Linux kernel, the following vulnerability has been resolved:
virt: acrn: Fix irqfd use-after-free during eventfd shutdown
acrn_irqfd_deassign() and the eventfd E...
|
7.8 High | — | 0,12% | 24 Sep 2026 |
|
CVE-2026-97474
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: purge async notifications upon nic error
This fixes a kernel panic in reconfig f...
|
7.4 High | — | 0,12% | 24 Sep 2026 |
|
CVE-2026-97455
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()
Fix use-after-free issue in acpi_ds...
|
8.4 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97454
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add boundary checks in acpi_ps_get_next_field()
Add boundary checks in acpi_ps_get_next_fiel...
|
7.7 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97452
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Prevent adding invalid references
Prevent adding references for local, argument, and debug o...
|
8.4 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97451
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)
Add overflow check for Index + Le...
|
8.4 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97450
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: validate handler object type in two places
ACPICA: validate handler object type in acpi_ev_h...
|
8.4 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97448
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add validation for node in acpi_ns_build_normalized_path()
Add validation for node in acpi_n...
|
7.7 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97445
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()
Enhance buffer validation in acpi_...
|
7.7 High | — | 0,16% | 24 Sep 2026 |
|
CVE-2026-97444
In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add boundary checks in two places
Add boundary checks in acpi_ps_get_next_namestring() and
a...
|
7.7 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97442
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi
In certain cases, hardware mig...
|
8.8 High | — | 0,25% | 24 Sep 2026 |
|
CVE-2026-97438
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: validate index entry key bounds
[BUG]
A malformed NTFS directory index entry can advertise...
|
7.1 High | — | 0,13% | 24 Sep 2026 |
|
CVE-2026-97437
In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()
The bounds check in ntfs_dir_emit(...
|
7.1 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97433
In the Linux kernel, the following vulnerability has been resolved:
nvme: validate FDP configuration descriptor sizes
Validate descriptor sizes while walking the FDP co...
|
8.2 High | — | 0,32% | 24 Sep 2026 |
|
CVE-2026-97429
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: fix UAF race in destroy_queue_cpsch
wait_on_destroy_queue() drops locks to wait for queu...
|
7.8 High | — | 0,13% | 24 Sep 2026 |
|
CVE-2026-97428
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: harden FRU PIA parsing with bounded helpers
Replace the open-coded TLV walk with fru_pia...
|
7.7 High | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-97421
In the Linux kernel, the following vulnerability has been resolved:
RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
Several corner cases, es...
|
7.8 High | — | 0,13% | 24 Sep 2026 |
|
CVE-2026-97417
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
The timestamp-only fast path derefer...
|
7.5 High | — | 0,49% | 24 Sep 2026 |
|
CVE-2026-97415
In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF
ROOT_REF and ROOT_BACKREF items con...
|
7.8 High | — | 0,13% | 24 Sep 2026 |
|
CVE-2026-97413
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rtrs-srv: Fix integer underflow in process_read and process_write
usr_len is read from a networ...
|
9.8 Critical | — | 0,50% | 24 Sep 2026 |
|
CVE-2026-97409
In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Do not cancel requests in io target before it is initialized
A new nvme-fc controller in CO...
|
8.8 High | — | 0,24% | 24 Sep 2026 |
|
CVE-2026-97231
A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The m...
|
7.3 High | — | 0,38% | 24 Sep 2026 |
|
CVE-2026-94613
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik...
|
7.5 High | — | 0,64% | 24 Sep 2026 |
|
CVE-2026-94612
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an authentik SAML Source verifies an assertion's signature and validity period b...
|
7.4 High | — | 0,27% | 24 Sep 2026 |
|
CVE-2026-94611
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view per...
|
8.1 High | — | 0,33% | 24 Sep 2026 |
|
CVE-2026-94609
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account with delegated permission to manage a group, group membership, or a u...
|
8.8 High | — | 0,51% | 24 Sep 2026 |
|
CVE-2026-94606
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik email authenticator enrollment during an authentication or enrollment...
|
8.9 High | — | 0,49% | 24 Sep 2026 |
|
CVE-2026-94281
An out-of-bounds read in libXi's XListInputDevices() class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client.
|
6.5 Medium | — | 0,20% | 24 Sep 2026 |
|
CVE-2026-93830
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: xgmac2: disable RBUE in default RX interrupt mask
Enabling the RX Buffer Unavailable (R...
|
7.5 High | — | 0,49% | 24 Sep 2026 |
|
CVE-2026-93827
In the Linux kernel, the following vulnerability has been resolved:
virtio-fs: avoid double-free on failed queue setup
virtio_fs_setup_vqs() allocates fs->vqs and fs->m...
|
8.4 High | — | 0,14% | 24 Sep 2026 |