Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-85288
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WM_MACRODLGRUNMACRO, the Run...
|
6.7 Medium | — | 0,14% | 22 Sep 2026 |
|
CVE-2026-85279
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ contains a stack buffer overflow in PluginsManager::loadPluginFromPath in PowerEditor/sr...
|
8.6 High | — | 0,22% | 22 Sep 2026 |
|
CVE-2026-84412
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-83660
adobe campaign
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does...
|
10.0 Critical | — | 0,34% | 22 Sep 2026 |
|
CVE-2026-83597
Netdata is an open source observability tool. From version 2.0.0 until 2.10.4, Netdata Windows Agent MSI repair launches powershell.exe and wevtutil.exe as elevated inter...
|
7.0 High | — | 0,14% | 22 Sep 2026 |
|
CVE-2026-82443
adobe campaign
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could...
|
9.9 Critical | — | 0,35% | 22 Sep 2026 |
|
CVE-2026-82013
adobe campaign
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could...
|
9.9 Critical | — | 0,82% | 22 Sep 2026 |
|
CVE-2026-82011
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a S...
|
9.1 Critical | — | 0,55% | 22 Sep 2026 |
|
CVE-2026-82010
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arb...
|
9.9 Critical | — | 0,43% | 22 Sep 2026 |
|
CVE-2026-82009
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arb...
|
9.1 Critical | — | 0,99% | 22 Sep 2026 |
|
CVE-2026-82008
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A...
|
9.9 Critical | — | 0,53% | 22 Sep 2026 |
|
CVE-2026-82003
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A...
|
8.5 High | — | 0,46% | 22 Sep 2026 |
|
CVE-2026-7866
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before...
|
10.0 Critical | — | 0,31% | 22 Sep 2026 |
|
CVE-2026-77605
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file tha...
|
7.8 High | — | 0,21% | 22 Sep 2026 |
|
CVE-2026-77274
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf has a backslash authority conf...
|
8.2 High | — | 0,32% | 22 Sep 2026 |
|
CVE-2026-77271
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_safe_path defaults its base directory to os...
|
8.8 High | — | 0,53% | 22 Sep 2026 |
|
CVE-2026-77270
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira and Confluence attachment upload tools trea...
|
6.5 Medium | — | 0,37% | 22 Sep 2026 |
|
CVE-2026-77267
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the X-Atlassian-Jira-Url and X-Atlassian-Confluence-...
|
6.5 Medium | — | 0,29% | 22 Sep 2026 |
|
CVE-2026-77265
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved...
|
7.5 High | — | 0,27% | 22 Sep 2026 |
|
CVE-2026-77261
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _make_ssrf_safe_hook is omitted from JiraFetcher and...
|
8.5 High | — | 0,32% | 22 Sep 2026 |
|
CVE-2026-77260
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Confluence and Jira upload_attachment implementa...
|
7.5 High | — | 0,35% | 22 Sep 2026 |
|
CVE-2026-77258
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, upload_attachment in src/mcp_atlassian/confluence/at...
|
7.7 High | — | 0,34% | 22 Sep 2026 |
|
CVE-2026-77252
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, caller-supplied projects_filter and spaces_filter ar...
|
6.5 Medium | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-77251
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Jira search accepts a forbidden project clause becau...
|
6.5 Medium | — | 0,24% | 22 Sep 2026 |
|
CVE-2026-77250
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OAuthConfig writes a plaintext fallback file contain...
|
6.1 Medium | — | 0,11% | 22 Sep 2026 |
|
CVE-2026-77244
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the HTTP transport accepts requests without a verifi...
|
10.0 Critical | — | 0,29% | 22 Sep 2026 |
|
CVE-2026-77243
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools ar...
|
8.8 High | — | 0,32% | 22 Sep 2026 |
|
CVE-2026-77242
mcp-atlassian mcp atlassian
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, validate_url_for_ssrf checks a hostname's resolved a...
|
7.5 High | — | 0,30% | 22 Sep 2026 |
|
CVE-2026-75728
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An...
|
9.1 Critical | — | 1,0% | 22 Sep 2026 |
|
CVE-2026-75723
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-75721
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-75703
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-75699
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-73369
adobe campaign
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in th...
|
10.0 Critical | — | 1,2% | 22 Sep 2026 |
|
CVE-2026-43643
Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an authorization bypass vulnerability in the billing module handler that allows unauthenticated remote a...
|
7.5 High | — | 0,62% | 22 Sep 2026 |
|
CVE-2026-43642
Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote at...
|
8.1 High | — | 0,96% | 22 Sep 2026 |
|
CVE-2026-43641
Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command injection vulnerability in the billing module handler that allows unauthenticated remote a...
|
9.8 Critical | — | 3,0% | 22 Sep 2026 |
|
CVE-2026-18626
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1,...
|
6.8 Medium | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-18462
Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation. This issue affects...
|
7.3 High | — | 0,08% | 22 Sep 2026 |
|
CVE-2026-18461
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection. This issue affects Connext Professio...
|
9.2 Critical | — | 0,21% | 22 Sep 2026 |
|
CVE-2026-18460
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7....
|
6.9 Medium | — | 0,25% | 22 Sep 2026 |
|
CVE-2026-18459
Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality. This issue affects Connext Professional: from 7.4.0...
|
8.7 High | — | 0,25% | 22 Sep 2026 |
|
CVE-2026-18458
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professio...
|
6.8 Medium | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-18457
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers. This issue affects Connext Professional: from 7.4.0 before...
|
8.3 High | — | 0,26% | 22 Sep 2026 |
|
CVE-2026-11389
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professio...
|
6.8 Medium | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-11388
Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from...
|
6.9 Medium | — | 0,10% | 22 Sep 2026 |
|
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory...
|
3.6 Low | — | 0,13% | 22 Sep 2026 |
|
CVE-2026-94456
Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same helper is used for OAuth access tokens, autho...
|
9.1 Critical | — | 0,52% | 22 Sep 2026 |
|
CVE-2026-94455
An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an expli...
|
7.1 High | — | 0,26% | 22 Sep 2026 |
|
CVE-2026-87902
Advisory
wordpress
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If r...
|
8.1 High | KEV | 40,0% | 22 Sep 2026 |