Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-77257
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HTTP-exposed Jira and Confluence upload tools pass a...
|
6.5 Medium | — | 0,39% | 22 Sep 2026 |
|
CVE-2026-77256
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the plaintext OAuth fallback file containing refresh...
|
6.5 Medium | — | 0,35% | 22 Sep 2026 |
|
CVE-2026-77255
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argument is conver...
|
8.6 High | — | 0,41% | 22 Sep 2026 |
|
CVE-2026-77254
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user...
|
9.1 Critical | — | 0,62% | 22 Sep 2026 |
|
CVE-2026-77253
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence attachment upload tools accept a...
|
7.1 High | — | 0,37% | 22 Sep 2026 |
|
CVE-2026-77249
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, JiraUserMixin._lookup_user_by_permissions uses the m...
|
5.3 Medium | — | 0,32% | 22 Sep 2026 |
|
CVE-2026-77248
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the streamable HTTP transport accepts requests witho...
|
8.6 High | — | 0,41% | 22 Sep 2026 |
|
CVE-2026-77247
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira and Confluence upload tools interpret caller-co...
|
6.5 Medium | — | 0,39% | 22 Sep 2026 |
|
CVE-2026-77246
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ONLY_MODE=fal...
|
8.6 High | — | 0,43% | 22 Sep 2026 |
|
CVE-2026-76194
adobe c2pa, adobe c2patool
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...
|
4.3 Medium | — | 0,59% | 22 Sep 2026 |
|
CVE-2026-76192
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabili...
|
5.5 Medium | — | 0,18% | 22 Sep 2026 |
|
CVE-2026-75745
Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current use...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-75744
Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious...
|
8.1 High | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-75743
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leve...
|
7.1 High | — | 1,5% | 22 Sep 2026 |
|
CVE-2026-75698
adobe connect, adobe connect for mobile
Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web pag...
|
9.3 Critical | — | 0,32% | 22 Sep 2026 |
|
CVE-2026-75697
adobe connect, adobe connect for mobile
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields...
|
9.3 Critical | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-75689
adobe connect, adobe connect for mobile
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields...
|
9.3 Critical | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-75686
adobe connect, adobe connect for mobile
Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker coul...
|
9.3 Critical | — | 0,64% | 22 Sep 2026 |
|
CVE-2026-75684
adobe connect, adobe connect for mobile
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields...
|
9.3 Critical | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-75682
adobe connect, adobe connect for mobile
Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code exe...
|
9.9 Critical | — | 0,55% | 22 Sep 2026 |
|
CVE-2026-75676
adobe bridge
Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...
|
7.8 High | — | 0,19% | 22 Sep 2026 |
|
CVE-2026-75665
adobe bridge
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...
|
7.8 High | — | 0,20% | 22 Sep 2026 |
|
CVE-2026-75663
adobe bridge
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | 0,16% | 22 Sep 2026 |
|
CVE-2026-75658
adobe bridge
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | 0,15% | 22 Sep 2026 |
|
CVE-2026-75656
adobe bridge
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sen...
|
5.5 Medium | — | 0,15% | 22 Sep 2026 |
|
CVE-2026-75655
adobe bridge
Bridge is affected by an Uncontrolled Recursion vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit...
|
7.8 High | — | 0,17% | 22 Sep 2026 |
|
CVE-2026-75649
adobe bridge
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is...
|
7.8 High | — | 0,19% | 22 Sep 2026 |
|
CVE-2026-75638
adobe c2pa, adobe c2patool
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...
|
6.5 Medium | — | 0,72% | 22 Sep 2026 |
|
CVE-2026-75634
adobe c2pa, adobe c2patool
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...
|
4.3 Medium | — | 0,59% | 22 Sep 2026 |
|
CVE-2026-75633
adobe c2pa, adobe c2patool
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vu...
|
5.5 Medium | — | 0,24% | 22 Sep 2026 |
|
CVE-2026-75632
adobe c2pa, adobe c2patool
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this...
|
7.5 High | — | 0,90% | 22 Sep 2026 |
|
CVE-2026-63386
js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interprete...
|
5.3 Medium | — | 0,36% | 22 Sep 2026 |
|
CVE-2026-57149
plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone. Starting in version 5...
|
9.9 Critical | — | 0,64% | 22 Sep 2026 |
|
CVE-2026-48361
adobe connect, adobe connect for mobile
Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields...
|
6.1 Medium | — | 0,18% | 22 Sep 2026 |
|
CVE-2026-37604
pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _protected/framework/Ip/Ip.class.php from the HTTP_CLIENT_IP and HTTP_X_FO...
|
9.8 Critical | — | 0,37% | 22 Sep 2026 |
|
CVE-2026-37603
Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 Social Dating CMS) through 19.2.0. The CAPTCHA escala...
|
6.5 Medium | — | 0,50% | 22 Sep 2026 |
|
CVE-2026-34689
adobe connect, adobe connect for mobile
Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read...
|
8.6 High | — | 0,66% | 22 Sep 2026 |
|
CVE-2026-19480
adobe c2pa, adobe c2patool
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerab...
|
7.5 High | — | 0,61% | 22 Sep 2026 |
|
CVE-2026-95660
A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function of the file agent-core-v2/src/agent/mcp/config-load...
|
6.3 Medium | — | 1,7% | 22 Sep 2026 |
|
CVE-2026-95657
A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js...
|
3.5 Low | — | 0,42% | 22 Sep 2026 |
|
CVE-2026-95656
A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add_watch_ui_snapshot of the file changedetectionio/bluep...
|
7.3 High | — | 0,51% | 22 Sep 2026 |
|
CVE-2026-95624
The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from frontend JavaScript code. When set to true, it replaces the vers...
|
6.8 Medium | — | 0,45% | 22 Sep 2026 |
|
CVE-2026-94384
Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to es...
|
8.1 High | — | 0,32% | 22 Sep 2026 |
|
CVE-2026-93345
MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnerability in the labelled-VPN NLRI iterators of the routing service that allows an unauthenti...
|
7.5 High | — | 0,49% | 22 Sep 2026 |
|
CVE-2026-89276
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
9.9 Critical | — | 0,53% | 22 Sep 2026 |
|
CVE-2026-89275
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-8849
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. This issue affects Connext Professional: from 7.6.0 before 7.7.0.1.
|
7.7 High | — | 0,38% | 22 Sep 2026 |
|
CVE-2026-86056
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo...
|
5.5 Medium | — | 0,16% | 22 Sep 2026 |
|
CVE-2026-86054
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in NppParameters::writeSession in PowerEditor/src/Param...
|
7.8 High | — | 0,23% | 22 Sep 2026 |
|
CVE-2026-85995
Notepad++ is a free and open-source source code editor. From 8.9.7 until 8.9.8, the Notepad++ updater and signature verification path can accept a modified GUP.exe file w...
|
7.3 High | — | 0,12% | 22 Sep 2026 |