Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-76086
Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings control panel action in IntegrationsController::ac...
|
8.5 High | — | 0,29% | 23 Sep 2026 |
|
CVE-2026-75131
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to ex...
|
7.8 High | — | 0,18% | 23 Sep 2026 |
|
CVE-2026-71465
RunAdHocCommand.build_args() appends limit as bare
positional (args.append(limit)) instead of using
args.extend(['-l', limit]) like RunJob. A...
|
3.1 Low | — | 0,21% | 23 Sep 2026 |
|
CVE-2026-71464
LaunchConfigurationBaseSerializer.scm_branch has no
validate_scm_branch() leading-dash check, unlike
Project/JobTemplate/JobLaunch serializers...
|
3.1 Low | — | 0,21% | 23 Sep 2026 |
|
CVE-2026-71463
Notification template Jinja AST whitelist only inspects
static Getattr nodes. Dynamic subscripts (job['job'+'_env'])
and {% if job.id > 100 %}...
|
2.7 Low | — | 0,27% | 23 Sep 2026 |
|
CVE-2026-71462
StringListPathField.to_internal_value() calls
os.path.exists() on unbounded user-supplied paths.
200 vs 400 response reveals existence of arbi...
|
4.1 Medium | — | 0,26% | 23 Sep 2026 |
|
CVE-2026-71461
HostList.list() catches bare Exception and returns str(e)
verbatim. Via host_filter, any authenticated user triggers
Django FieldError (leakin...
|
4.3 Medium | — | 0,21% | 23 Sep 2026 |
|
CVE-2026-71460
/api/v2/config/ is protected only by IsAuthenticated.
license_info (account_number, subscription_id, pool_id,
sku, support_level, instance cou...
|
4.3 Medium | — | 0,22% | 23 Sep 2026 |
|
CVE-2026-71459
JobJobEventsChildrenSummary view has no model/parent_model.
ModelAccessPermission.check_get_permissions() falls through
(returns True) for any...
|
5.0 Medium | — | 0,28% | 23 Sep 2026 |
|
CVE-2026-71458
URLModificationMiddleware resolves named-URL lookups
against unfiltered Model.objects before RBAC. The 403→404
shim only rewrites 403 response...
|
5.0 Medium | — | 0,30% | 23 Sep 2026 |
|
CVE-2026-63132
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path in http/logical.go compared the highly privileged...
|
9.2 Critical | — | 0,50% | 23 Sep 2026 |
|
CVE-2026-63131
OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader wildcard ACL grant before more-...
|
6.0 Medium | — | 0,35% | 23 Sep 2026 |
|
CVE-2026-61814
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because e...
|
7.5 High | — | 0,57% | 23 Sep 2026 |
|
CVE-2026-61695
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroup(expectedEndTag:...
|
7.5 High | — | 0,58% | 23 Sep 2026 |
|
CVE-2026-59990
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote atta...
|
7.5 High | — | 0,62% | 23 Sep 2026 |
|
CVE-2026-55632
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment,...
|
4.3 Medium | — | 0,30% | 23 Sep 2026 |
|
CVE-2026-52744
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines/**/upstream does not...
|
5.3 Medium | — | 0,43% | 23 Sep 2026 |
|
CVE-2026-91775
LimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS i...
|
7.4 High | — | 0,38% | 23 Sep 2026 |
|
CVE-2026-88840
BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.
|
5.3 Medium | — | 0,21% | 23 Sep 2026 |
|
CVE-2026-88839
BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.
|
6.7 Medium | — | 0,12% | 23 Sep 2026 |
|
CVE-2026-88837
BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.
|
6.5 Medium | — | 0,27% | 23 Sep 2026 |
|
CVE-2026-88835
BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.
|
6.1 Medium | — | 0,12% | 23 Sep 2026 |
|
CVE-2026-88831
BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.
|
5.3 Medium | — | 0,24% | 23 Sep 2026 |
|
CVE-2026-86938
claris filemaker pro
A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing...
|
7.3 High | — | 0,10% | 23 Sep 2026 |
|
CVE-2026-86934
claris filemaker server
An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom...
|
9.1 Critical | — | 0,32% | 23 Sep 2026 |
|
CVE-2026-86930
claris filemaker server
An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process me...
|
9.1 Critical | — | 0,29% | 23 Sep 2026 |
|
CVE-2026-86926
claris filemaker server
A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corr...
|
7.8 High | — | 0,13% | 23 Sep 2026 |
|
CVE-2026-86867
Cinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper acc...
|
6.5 Medium | — | 0,18% | 23 Sep 2026 |
|
CVE-2026-96808
In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file paths by rejecting l...
|
7.4 High | — | 0,12% | 23 Sep 2026 |
|
CVE-2026-96807
In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary locati...
|
4.0 Medium | — | 0,12% | 23 Sep 2026 |
|
CVE-2026-96804
MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model(), which allows a remot...
|
8.8 High | — | 0,42% | 23 Sep 2026 |
|
CVE-2026-96775
MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends in .pkl, which allows a remot...
|
8.8 High | — | 0,39% | 23 Sep 2026 |
|
CVE-2026-96759
orval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects. Attackers can inject arbitr...
|
9.8 Critical | — | 0,43% | 23 Sep 2026 |
|
CVE-2026-96758
orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in generated template li...
|
9.8 Critical | — | 0,54% | 23 Sep 2026 |
|
CVE-2026-96757
orval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code. Attackers can inject Jav...
|
9.8 Critical | — | 0,57% | 23 Sep 2026 |
|
CVE-2026-96756
orval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in new Date() calls. Att...
|
8.1 High | — | 0,48% | 23 Sep 2026 |
|
CVE-2026-96755
orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into template literals. A...
|
9.8 Critical | — | 0,42% | 23 Sep 2026 |
|
CVE-2026-96754
orval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values in single-quoted route literals....
|
9.8 Critical | — | 0,43% | 23 Sep 2026 |
|
CVE-2026-96656
plex media server
Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbati...
|
7.2 High | — | 0,40% | 23 Sep 2026 |
|
CVE-2026-96655
plex media server
Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path paramet...
|
4.3 Medium | — | 0,22% | 23 Sep 2026 |
|
CVE-2026-96654
plex media server
Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply t...
|
6.5 Medium | — | 0,23% | 23 Sep 2026 |
|
CVE-2026-96652
plex media server
Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and...
|
4.3 Medium | — | 0,22% | 23 Sep 2026 |
|
CVE-2026-96651
plex media server
Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/g...
|
6.5 Medium | — | 0,52% | 23 Sep 2026 |
|
CVE-2026-96514
A weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login Handler. This manipul...
|
7.3 High | — | 0,25% | 23 Sep 2026 |
|
CVE-2026-96513
A security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The manipulation of the argu...
|
7.3 High | — | 0,28% | 23 Sep 2026 |
|
CVE-2026-95848
moquette
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded, Server.initializeAuthenticator and Se...
|
9.1 Critical | — | 0,42% | 23 Sep 2026 |
|
CVE-2026-95847
moquette
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue_ plus the client ID and its metadata-map name...
|
7.5 High | — | 0,34% | 23 Sep 2026 |
|
CVE-2026-95846
moquette
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the canWrite authorization and...
|
7.5 High | — | 0,27% | 23 Sep 2026 |
|
CVE-2026-95845
moquette
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues. When a fast publisher se...
|
7.5 High | — | 0,36% | 23 Sep 2026 |
|
CVE-2026-95844
moquette
Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive C...
|
7.5 High | — | 0,36% | 23 Sep 2026 |