Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-96884
A security flaw has been discovered in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. T...
|
6.3 Medium | — | 0,34% | 24 Sep 2026 |
|
CVE-2026-96882
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/t...
|
5.3 Medium | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-96881
A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controlle...
|
5.3 Medium | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-97056
SigNoz versions from v0.98.0 up to (but not including) v0.143.0, when configured to use the opaque session tokenizer (which was not the default before v0.143.0), do not r...
|
6.8 Medium | — | 0,35% | 24 Sep 2026 |
|
CVE-2026-97055
SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (tokenizer::jwt::secret, set via SIGNOZ_TOKENIZER_JWT_SECRET or the deprecated SIGNOZ_JWT_SEC...
|
8.1 High | — | 0,41% | 24 Sep 2026 |
|
CVE-2026-96880
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/...
|
5.3 Medium | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-96810
A vulnerability was identified in huanzi-qch base-admin up to 52816b760cd53244989fd664bbb2b3d4edbfdbf1. This issue affects the function Save of the file base-admin-master...
|
3.5 Low | — | 0,19% | 24 Sep 2026 |
|
CVE-2026-96803
A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fa...
|
7.3 High | — | 0,25% | 24 Sep 2026 |
|
CVE-2026-96777
A vulnerability was determined in Forma LMS up to 4.1.43. This impacts the function UserselectorAdmController::getDataTask of the file /appCore/ajax.adm_server.php?r=adm/...
|
6.3 Medium | — | 0,20% | 24 Sep 2026 |
|
CVE-2026-18467
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch intr...
|
9.8 Critical | — | 0,39% | 24 Sep 2026 |
|
CVE-2026-96774
A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.3_20181106 Build 107. This affects the function loadCfg of the file /ini/sys_cfg.txt...
|
5.3 Medium | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-96773
A weakness has been identified in Intelliants Subrion CMS up to 4.2.1. This vulnerability affects the function iaUsers::authorize of the file front/login.php of the compo...
|
4.3 Medium | — | 0,25% | 24 Sep 2026 |
|
CVE-2026-96772
A security flaw has been discovered in Intelliants Subrion CMS up to 4.2.1. This affects an unknown part of the file /actions.json?action=assign-owner. The manipulation o...
|
5.3 Medium | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-96764
A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expr...
|
4.3 Medium | — | 0,27% | 24 Sep 2026 |
|
CVE-2026-96763
A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the...
|
5.4 Medium | — | 0,25% | 24 Sep 2026 |
|
CVE-2026-96762
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipula...
|
7.3 High | — | 0,29% | 24 Sep 2026 |
|
CVE-2026-96751
A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax...
|
7.3 High | — | 0,25% | 24 Sep 2026 |
|
CVE-2026-96739
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/upload_json.php of the component KindEditor Upload I...
|
4.3 Medium | — | 0,26% | 24 Sep 2026 |
|
CVE-2026-93577
Advisory
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions co...
|
9.9 Critical | — | 0,55% | 24 Sep 2026 |
|
CVE-2026-92874
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions co...
|
5.4 Medium | — | 0,15% | 24 Sep 2026 |
|
CVE-2026-92628
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the...
|
3.1 Low | — | 0,14% | 24 Sep 2026 |
|
CVE-2026-92530
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions co...
|
4.3 Medium | — | 0,11% | 24 Sep 2026 |
|
CVE-2026-92529
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could...
|
4.3 Medium | — | 0,18% | 24 Sep 2026 |
|
CVE-2026-92470
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could...
|
7.7 High | — | 0,21% | 24 Sep 2026 |
|
CVE-2026-89078
Advisory
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions co...
|
9.9 Critical | — | 0,44% | 24 Sep 2026 |
|
CVE-2026-82370
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI...
|
8.6 High | — | 0,61% | 24 Sep 2026 |
|
CVE-2026-96680
A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener...
|
4.3 Medium | — | 0,26% | 23 Sep 2026 |
|
CVE-2026-96678
A security vulnerability has been detected in weiqingwen spring-boot-forum up to 538eecc3c6b85fdf0768ab4e8354b48c0c17d94f. Affected is the function validate of the file s...
|
6.3 Medium | — | 0,34% | 23 Sep 2026 |
|
CVE-2026-96676
A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to st...
|
6.3 Medium | — | 0,24% | 23 Sep 2026 |
|
CVE-2026-96606
A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the component Configuration Back...
|
5.3 Medium | — | 0,29% | 23 Sep 2026 |
|
CVE-2026-70125
microsoft 365 apps, microsoft office 2021 +1 lainnya
Microsoft Office Outlook Remote Code Execution Vulnerability
|
8.8 High | — | 0,43% | 23 Sep 2026 |
|
CVE-2026-59980
hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(...
|
6.3 Medium | — | 0,30% | 23 Sep 2026 |
|
CVE-2026-96604
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function strip_data of the file engine/modules/search.php of the component S...
|
7.3 High | — | 0,25% | 23 Sep 2026 |
|
CVE-2026-96603
A vulnerability has been found in Abdurrab5 online-makeup-store. Affected is the function confirm_logged_in/confirm_user of the file functions.php of the component Admin...
|
7.3 High | — | 0,28% | 23 Sep 2026 |
|
CVE-2026-96602
A flaw has been found in Abdurrab5 online-makeup-store. This impacts an unknown function of the file customerSignin.php of the component Customer Login Handler. This mani...
|
7.3 High | — | 0,25% | 23 Sep 2026 |
|
CVE-2026-96601
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulati...
|
7.3 High | — | 0,25% | 23 Sep 2026 |
|
CVE-2026-93352
Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbidden_extensions blocklist in confi...
|
9.8 Critical | — | 0,62% | 23 Sep 2026 |
|
CVE-2026-86583
The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own exp...
|
8.8 High | — | 0,33% | 23 Sep 2026 |
|
CVE-2026-81537
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to OS command injection.
|
8.8 High | — | 1,0% | 23 Sep 2026 |
|
CVE-2026-81536
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection.
|
7.7 High | — | 0,28% | 23 Sep 2026 |
|
CVE-2026-81208
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attack...
|
7.7 High | — | 0,23% | 23 Sep 2026 |
|
CVE-2026-80423
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to the exposure of namespace-wide secrets via...
|
6.5 Medium | — | 0,32% | 23 Sep 2026 |
|
CVE-2026-75887
A flaw was found in the OpenShift console. An unauthenticated attacker can exploit a path traversal vulnerability by manipulating the `lng` and `ns` query parameters in t...
|
7.5 High | — | 0,51% | 23 Sep 2026 |
|
CVE-2026-19125
The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verify_login() funct...
|
8.1 High | — | 0,64% | 23 Sep 2026 |
|
CVE-2026-96556
A flaw has been found in Neethuharii CafeManagement. Affected by this vulnerability is the function addcashier of the file AddCashierCode.php. Executing a manipulation of...
|
7.3 High | — | 0,28% | 23 Sep 2026 |
|
CVE-2026-82369
Insufficient input sanitization of shell metacharacters in the Brocade SANnav CLI scripting component permits authenticated users to break out of restricted execution con...
|
8.6 High | — | 0,51% | 23 Sep 2026 |
|
CVE-2026-80425
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements u...
|
8.8 High | — | 0,96% | 23 Sep 2026 |
|
CVE-2026-80412
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper escaping of connector property values du...
|
8.8 High | — | 0,55% | 23 Sep 2026 |
|
CVE-2026-80379
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements u...
|
8.8 High | — | 0,96% | 23 Sep 2026 |
|
CVE-2026-75886
A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authentication, and th...
|
7.2 High | — | 0,33% | 23 Sep 2026 |