Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-95925
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/...
|
7.3 High | — | 0,27% | 23 Sep 2026 |
|
CVE-2026-95924
A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databan...
|
7.3 High | — | 0,26% | 23 Sep 2026 |
|
CVE-2026-95897
A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function from_npy_stack of the file dask/array/core.py of the component Loader. Such m...
|
5.5 Medium | — | 0,19% | 23 Sep 2026 |
|
CVE-2026-95868
A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is the function mysql...
|
6.3 Medium | — | 0,24% | 23 Sep 2026 |
|
CVE-2026-95833
A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of...
|
6.3 Medium | — | 0,20% | 23 Sep 2026 |
|
CVE-2026-95830
A security flaw has been discovered in theRealSain Pixtream up to 866afd4f0cea812b918780fb74b67dccf8c4d6a0. This issue affects some unknown processing of the file /post_u...
|
6.3 Medium | — | 0,20% | 23 Sep 2026 |
|
CVE-2026-95829
A vulnerability was identified in TDuckCloud tduck-platform up to 5.3. This vulnerability affects the function PaginationInnerInterceptor.concatOrderBy of the file tduck-...
|
6.3 Medium | — | 0,19% | 23 Sep 2026 |
|
CVE-2026-94367
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup. An authenticated administrator can supply crafte...
|
7.2 High | — | 1,0% | 23 Sep 2026 |
|
CVE-2026-92930
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side c...
|
6.2 Medium | — | 0,16% | 23 Sep 2026 |
|
CVE-2026-92929
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 trusts an X-Forwarded-For header supplied by an arbitrary client when determining the request source address....
|
5.3 Medium | — | 0,36% | 23 Sep 2026 |
|
CVE-2026-92928
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled...
|
6.5 Medium | — | 0,21% | 23 Sep 2026 |
|
CVE-2026-95828
A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.php of the component Authentica...
|
4.3 Medium | — | 0,49% | 22 Sep 2026 |
|
CVE-2026-95820
A vulnerability was found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this issue is some unknown functionality of t...
|
6.3 Medium | — | 0,35% | 22 Sep 2026 |
|
CVE-2026-61685
ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HT...
|
7.5 High | — | 0,53% | 22 Sep 2026 |
|
CVE-2026-57576
plone.app.dexterity is a content-type system for the Plone content management system, and plone.app.contenttypes provides Plone’s Dexterity-based content types. Plone.app...
|
6.5 Medium | — | 0,76% | 22 Sep 2026 |
|
CVE-2026-18176
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive info...
|
7.4 High | — | 0,13% | 22 Sep 2026 |
|
CVE-2026-18173
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS authe...
|
3.7 Low | — | 0,24% | 22 Sep 2026 |
|
CVE-2026-18172
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to improper restriction of XML external ent...
|
7.4 High | — | 0,20% | 22 Sep 2026 |
|
CVE-2026-18170
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to allocation of resources without limits or t...
|
6.5 Medium | — | 0,19% | 22 Sep 2026 |
|
CVE-2026-18169
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper validation of sym...
|
9.9 Critical | — | 0,54% | 22 Sep 2026 |
|
CVE-2026-18163
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper deserialization of untrusted data.
|
9.8 Critical | — | 0,51% | 22 Sep 2026 |
|
CVE-2026-18162
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled inp...
|
9.8 Critical | — | 0,48% | 22 Sep 2026 |
|
CVE-2026-95819
A vulnerability has been found in anirbandutta9 College-Notes-Gallery up to 8c1cf3d98f30982d069c88ca172612c001eb39f6. Affected by this vulnerability is an unknown functio...
|
7.3 High | — | 0,41% | 22 Sep 2026 |
|
CVE-2026-19202
A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an app...
|
9.1 Critical | — | 0,25% | 22 Sep 2026 |
|
CVE-2026-18161
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to falsify transaction audit logs due to improper validation of a...
|
4.3 Medium | — | 0,21% | 22 Sep 2026 |
|
CVE-2026-18156
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to imp...
|
6.5 Medium | — | 0,22% | 22 Sep 2026 |
|
CVE-2026-18154
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to the use of a hard-coded or predictable c...
|
7.5 High | — | 0,26% | 22 Sep 2026 |
|
CVE-2026-18153
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due...
|
7.1 High | — | 0,15% | 22 Sep 2026 |
|
CVE-2026-18152
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messages due to improper verification of cryptographic...
|
7.5 High | — | 0,18% | 22 Sep 2026 |
|
CVE-2026-18137
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL commands due to improper neutralization of special el...
|
8.1 High | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-18134
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive info...
|
7.5 High | — | 0,20% | 22 Sep 2026 |
|
CVE-2026-18133
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal.
|
6.5 Medium | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-18132
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to perform unauthorized payment mutation actions due to missing a...
|
6.5 Medium | — | 0,21% | 22 Sep 2026 |
|
CVE-2026-18131
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScript in an authenticated user's browser due to impro...
|
6.1 Medium | — | 0,22% | 22 Sep 2026 |
|
CVE-2026-18124
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information due to insufficiently protected credentials.
|
6.5 Medium | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-18123
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service due to the improper use of reflection with externa...
|
7.5 High | — | 0,26% | 22 Sep 2026 |
|
CVE-2026-18114
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization.
|
7.5 High | — | 0,43% | 22 Sep 2026 |
|
CVE-2026-18095
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
|
8.8 High | — | 0,44% | 22 Sep 2026 |
|
CVE-2026-18074
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper authentication and missing auth...
|
7.5 High | — | 0,36% | 22 Sep 2026 |
|
CVE-2026-18066
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and trigger unauthorized actions due to server-s...
|
7.1 High | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-17647
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untr...
|
8.8 High | — | 0,22% | 22 Sep 2026 |
|
CVE-2026-17646
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to improper restriction of XM...
|
6.5 Medium | — | 0,29% | 22 Sep 2026 |
|
CVE-2026-17645
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to gain elevated privileges due to improper privilege management.
|
8.8 High | — | 0,35% | 22 Sep 2026 |
|
CVE-2026-17644
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to gain unauthorized access to sensitive information and modify transaction data...
|
7.1 High | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-17643
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive information and perform unauthorized actions due to insuffic...
|
7.1 High | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-17637
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
|
8.8 High | — | 0,24% | 22 Sep 2026 |
|
CVE-2026-17636
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specifi...
|
8.8 High | — | 0,51% | 22 Sep 2026 |
|
CVE-2026-17635
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-ba...
|
9.1 Critical | — | 0,35% | 22 Sep 2026 |
|
CVE-2026-17620
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim F...
|
7.5 High | — | 0,21% | 22 Sep 2026 |
|
CVE-2026-17618
ibm financial transaction manager
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of...
|
9.8 Critical | — | 0,25% | 22 Sep 2026 |