Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-94143
A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM M...
|
7.3 High | — | 0,43% | 21 Sep 2026 |
|
CVE-2026-94142
A security vulnerability has been detected in BioStar Temperature Monitor Utility 1.2.1806.2200. Affected by this vulnerability is the function sub_1105C of the file BS_H...
|
8.8 High | — | 0,18% | 21 Sep 2026 |
|
CVE-2026-94139
A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /send_order.cgi?para...
|
7.4 High | — | 1,2% | 21 Sep 2026 |
|
CVE-2026-94138
A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /send_order.cg...
|
6.6 Medium | — | 2,1% | 21 Sep 2026 |
|
CVE-2026-94137
A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x64.sys of the component IRP_MJ_...
|
3.3 Low | — | 0,16% | 21 Sep 2026 |
|
CVE-2026-94185
nvm resolves a requested version or alias by treating it as a filename under $NVM_DIR/alias. Before 0.40.8, nvm_alias() concatenated the requested name onto that director...
|
5.5 Medium | — | 0,22% | 21 Sep 2026 |
|
CVE-2026-94129
A vulnerability was detected in BioStar VALKYRIE AURORA 2.10.2411.0800. This vulnerability affects the function sub_1105C of the file BS_RVSIO64.sys of the component IOCT...
|
8.8 High | — | 0,18% | 21 Sep 2026 |
|
CVE-2026-94128
A security vulnerability has been detected in BioStar VIVID LED DJ 4.0.2411.1500. This affects the function sub_1105C of the file BS_LED64.sys of the component IOCTL Hand...
|
8.8 High | — | 0,18% | 21 Sep 2026 |
|
CVE-2026-94110
A security vulnerability has been detected in QCMS up to 6.0.6. This issue affects the function self_Tmp in the library Lib/Config/Controllers.php of the component Conten...
|
7.3 High | — | 0,41% | 21 Sep 2026 |
|
CVE-2026-94103
A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/site_pagePHP.php of the component Frontend Rendering....
|
4.7 Medium | — | 0,41% | 21 Sep 2026 |
|
CVE-2026-94102
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login of the component Login. This manipulation of the a...
|
4.3 Medium | — | 0,43% | 21 Sep 2026 |
|
CVE-2026-94101
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of the file /usr/bin/routerd. Th...
|
9.9 Critical | — | 0,80% | 21 Sep 2026 |
|
CVE-2026-94100
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd of the component WAN VLAN...
|
9.9 Critical | — | 0,80% | 21 Sep 2026 |
|
CVE-2026-94099
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the file restore.cgi of the component Backup Rest...
|
9.9 Critical | — | 1,7% | 21 Sep 2026 |
|
CVE-2026-94098
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware U...
|
9.1 Critical | — | 2,4% | 21 Sep 2026 |
|
CVE-2026-94097
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of the component CGI Diagnostic...
|
10.0 Critical | — | 2,9% | 21 Sep 2026 |
|
CVE-2026-94096
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the file /usr/bin/network_tools of the component...
|
9.9 Critical | — | 2,0% | 21 Sep 2026 |
|
CVE-2026-94095
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the...
|
9.9 Critical | — | 2,4% | 21 Sep 2026 |
|
CVE-2026-94094
A flaw has been found in OpenClaw up to 2026.9.5. Affected is the function createCanvasHostHandler of the file extensions/canvas/src/host/server.ts of the component Canva...
|
4.3 Medium | — | 0,47% | 20 Sep 2026 |
|
CVE-2026-94093
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/load_replay_buffer/VecNormalize.load of the file sa...
|
6.3 Medium | — | 0,45% | 20 Sep 2026 |
|
CVE-2026-94092
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function load_info/_read_torch_data of the file utils.py. Performing a manipulation of the argument...
|
5.5 Medium | — | 0,34% | 20 Sep 2026 |
|
CVE-2026-94091
A weakness has been identified in piskvorky gensim up to 4.4.0. The impacted element is the function Load of the file gensim/utils.py of the component Model Loader. This...
|
5.5 Medium | — | 0,34% | 20 Sep 2026 |
|
CVE-2026-94090
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Par...
|
6.3 Medium | — | 0,42% | 20 Sep 2026 |
|
CVE-2026-94089
A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfa_authentication.cgi of the component Authentication Ha...
|
10.0 Critical | — | 0,98% | 20 Sep 2026 |
|
CVE-2026-94051
A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d. Affected by this vulnerability is the function ControlFlowNode of the fi...
|
6.3 Medium | — | 0,37% | 20 Sep 2026 |
|
CVE-2026-94050
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402. Affected is the function routerd.wificfg_get/routerd.get_rand_key of the component ubus JSO...
|
4.3 Medium | — | 0,45% | 20 Sep 2026 |
|
CVE-2026-94049
A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function render_slides of the file packages/cli/src/renderer.ts. This manipulation of the argumen...
|
4.3 Medium | — | 0,47% | 20 Sep 2026 |
|
CVE-2026-94048
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The man...
|
6.6 Medium | — | 0,40% | 20 Sep 2026 |
|
CVE-2026-94047
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService...
|
6.3 Medium | — | 0,43% | 20 Sep 2026 |
|
CVE-2026-94046
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the componen...
|
4.3 Medium | — | 0,47% | 20 Sep 2026 |
|
CVE-2026-94045
A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0. Impacted is an unknown function of the file controller/common/UploadController.java of the comp...
|
3.5 Low | — | 0,42% | 20 Sep 2026 |
|
CVE-2026-94044
A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mc...
|
7.3 High | — | 0,62% | 20 Sep 2026 |
|
CVE-2026-94043
A vulnerability was determined in Free5GC up to 4.2.3. This vulnerability affects unknown code of the file /corefuzzer_deps/free5gc/NFs/amf/internal/gmm/handler.go of the...
|
5.3 Medium | — | 0,57% | 20 Sep 2026 |
|
CVE-2026-94042
A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the fil...
|
6.3 Medium | — | 0,32% | 20 Sep 2026 |
|
CVE-2026-94041
A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Affected by this issue is some unknown funct...
|
6.3 Medium | — | 0,33% | 20 Sep 2026 |
|
CVE-2026-88857
Advisory
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark()...
|
9.4 Critical | — | 0,64% | 20 Sep 2026 |
|
CVE-2026-88856
Advisory
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery...
|
9.4 Critical | — | 0,67% | 20 Sep 2026 |
|
CVE-2026-88855
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes fo...
|
8.6 High | — | 0,37% | 20 Sep 2026 |
|
CVE-2026-88854
Advisory
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearch...
|
9.3 Critical | — | 0,39% | 20 Sep 2026 |
|
CVE-2026-94040
A flaw has been found in vas3k TaxHacker up to 0.8.5. Affected by this vulnerability is the function testLLMProviderAction of the file app/(app)/apps/settings/actions.ts....
|
5.3 Medium | — | 0,53% | 20 Sep 2026 |
|
CVE-2026-94039
A vulnerability was detected in vas3k TaxHacker up to 0.8.5. Affected is the function generateInvoicePDF of the file /apps/invoices/actions.ts of the component Invoice PD...
|
7.3 High | — | 0,50% | 20 Sep 2026 |
|
CVE-2026-94038
A security vulnerability has been detected in NonceGeek dim-sum-app. This impacts the function textSearchV2Handler of the file deno/main.tsx of the component Deno Backend...
|
7.3 High | — | 0,51% | 20 Sep 2026 |
|
CVE-2026-94037
A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405. This affects the function ControlFlowNode of the file main....
|
4.3 Medium | — | 0,47% | 20 Sep 2026 |
|
CVE-2026-94036
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the com...
|
8.8 High | — | 0,56% | 20 Sep 2026 |
|
CVE-2026-94035
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a mani...
|
4.3 Medium | — | 0,47% | 20 Sep 2026 |
|
CVE-2026-94034
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password...
|
3.5 Low | — | 0,35% | 20 Sep 2026 |
|
CVE-2026-94033
A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of t...
|
3.5 Low | — | 0,35% | 20 Sep 2026 |
|
CVE-2026-94032
A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argumen...
|
6.3 Medium | — | 0,33% | 20 Sep 2026 |
|
CVE-2026-94031
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914. Affected by this issue is the function child_process.exec of the file src/a...
|
6.3 Medium | — | 1,1% | 20 Sep 2026 |
|
CVE-2026-94030
A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c. Affected by this vulnerability is the function decode_bmp_pixel_d...
|
3.1 Low | — | 0,50% | 20 Sep 2026 |