Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-19477
There
is stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary...
|
7.8 High | — | 0,14% | 17 Sep 2026 |
|
CVE-2026-92927
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /db/drug_recommendor.sql. Performing a...
|
5.3 Medium | — | 0,53% | 17 Sep 2026 |
|
CVE-2026-92926
A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Suc...
|
7.3 High | — | 0,43% | 17 Sep 2026 |
|
CVE-2026-89038
Verizon Cloud for Android (com.vcast.mediamanager) before 26.7.10 contains a path traversal vulnerability that allows co-resident malicious applications to write attacker...
|
6.2 Medium | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-54677
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions be...
|
6.5 Medium | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-54676
Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, users with personal API tokens can retrieve replies from questions in private spaces they can...
|
6.5 Medium | — | 0,40% | 17 Sep 2026 |
|
CVE-2026-54551
WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.0 until 2.3.0, the authenticated GET /api/v0/ws statistics W...
|
4.3 Medium | — | 0,36% | 17 Sep 2026 |
|
CVE-2026-54546
CloudTAK is a browser-based Common Operating Picture and situational awareness tool compatible with TAK. Prior to 13.22.1, the authenticated PUT /api/basemap endpoint pas...
|
5.0 Medium | — | 0,37% | 17 Sep 2026 |
|
CVE-2026-54446
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1....
|
8.1 High | — | 0,62% | 17 Sep 2026 |
|
CVE-2026-54053
Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php ac...
|
9.6 Critical | — | 0,70% | 17 Sep 2026 |
|
CVE-2026-52836
OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). Prior to 3.34.0, a network attacker can crash a reachab...
|
8.7 High | — | 0,74% | 17 Sep 2026 |
|
CVE-2026-44236
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_l...
|
7.1 High | — | 0,40% | 17 Sep 2026 |
|
CVE-2026-44235
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login an...
|
6.5 Medium | — | 0,31% | 17 Sep 2026 |
|
CVE-2026-93296
MISP contains a stored cross-site scripting (XSS) vulnerability in the Overmind theme's statistics views. The event General card and the server/feed preview card construc...
|
8.5 High | — | 0,39% | 17 Sep 2026 |
|
CVE-2026-93295
MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arguments are passed directly as...
|
8.7 High | — | 0,64% | 17 Sep 2026 |
|
CVE-2026-93292
SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability in trace-funnel analytics endpoints that interpolate service_name and span_name fields in...
|
8.5 High | — | 0,40% | 17 Sep 2026 |
|
CVE-2026-93203
In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: avoid CRC corruption due to parallel claim add
batadv_bla_add_claim() is used to ad...
|
7.1 High | — | 0,33% | 17 Sep 2026 |
|
CVE-2026-93201
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: validate seg_id fields from persistent memory
cache_pos_decode(), cache_key_decode() and...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93196
In the Linux kernel, the following vulnerability has been resolved:
nvdimm: virtio_pmem: refcount requests for token lifetime
KASAN reports slab-use-after-free in __wak...
|
8.4 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-93192
In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Clear queue->active_job when v3d_fence_create() fails
The run_job() callbacks for BIN, REND...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-93190
In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
cros_typec_register_partner_pdos()...
|
8.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93189
In the Linux kernel, the following vulnerability has been resolved:
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
A driver's probe calls hid_devic...
|
8.8 High | — | 0,31% | 17 Sep 2026 |
|
CVE-2026-93178
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
vddInd and vddcInd fields from VB...
|
7.1 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93177
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
vddInd, vddciInd and mvddInd fr...
|
7.3 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93176
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix dangling pointer in plane reset function
amdgpu_dm_plane_drm_plane_reset() free...
|
7.0 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-93175
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Fix dangling pointer in CRTC reset function
amdgpu_dm_crtc_reset_state() frees the...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93170
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
Fix...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-93165
In the Linux kernel, the following vulnerability has been resolved:
platform/chrome: sensorhub: Fix memory overread in ring handler
`max_response` and `sensor_num` are...
|
7.7 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-93154
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Add refcounting to user ring MRs
Prevent userspace from deregistering the MRs that back...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93151
In the Linux kernel, the following vulnerability has been resolved:
nvmet-rdma: fix response resource leak on queue teardown
When an nvme target with rdma transport is...
|
7.5 High | — | 0,67% | 17 Sep 2026 |
|
CVE-2026-93148
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject MEM_ALLOC BTF accesses past object bounds
BTF struct walks relax the struct-size check f...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93147
In the Linux kernel, the following vulnerability has been resolved:
s390/bpf: Replace ly instruction with llgf
cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit regist...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93144
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject writes through untrusted BTF pointers
check_ptr_to_btf_access() lets program-type btf_st...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-93138
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux
bpf_get_btf_vmlinux() lazily parses the vmlinu...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-93137
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix use-after-free on mm_struct in bpf_find_vma()
bpf_find_vma() reads task->mm and calls mmap_...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93127
In the Linux kernel, the following vulnerability has been resolved:
bpf: Drop scalar id on sign-extending narrowing stack fills
When a spilled scalar is filled back wit...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93125
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
check_kfunc_args() detects a kf...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-93122
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: uac: validate rate list length before storing
UAC1 and UAC2 configfs rate-list attribut...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93121
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths
The error paths for endpoi...
|
7.0 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93116
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: asus-wmi: fix resource leaks on probe failure
During driver initialization in asus_wmi...
|
7.0 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93112
In the Linux kernel, the following vulnerability has been resolved:
bpf: Require a BPF cpumask for bpf_cpumask_populate()
bpf_cpumask_populate() writes to its destinati...
|
7.1 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93111
In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark tracing_multi trampolines as ftrace managed
Since tracing_multi link does not set ftrace_m...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93107
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state
When do_complete...
|
8.2 High | — | 0,54% | 17 Sep 2026 |
|
CVE-2026-93105
In the Linux kernel, the following vulnerability has been resolved:
esp: do not unref managed frag pages in esp_ssg_unref()
esp_ssg_unref() releases the page references...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93095
In the Linux kernel, the following vulnerability has been resolved:
hfsplus: validate thread record before delete key rebuild
hfsplus_delete_cat() is called with str ==...
|
7.8 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-93079
In the Linux kernel, the following vulnerability has been resolved:
cxl/features: Reject Get Feature count larger than the output buffer
cxlctl_get_feature() sizes its...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93074
In the Linux kernel, the following vulnerability has been resolved:
dax/fsdev: use __va(phys) for kaddr in direct_access
Use __va(phys) instead of virt_addr + linear_of...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-93070
In the Linux kernel, the following vulnerability has been resolved:
media: ipu6: Do not free aux device pdata after init
ipu6_bus_initialize_device() stores the isys/ps...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93063
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mei: check SAP message length before reading it
Verify the SAP message size is not la...
|
8.4 High | — | 0,21% | 17 Sep 2026 |
|
CVE-2026-93054
In the Linux kernel, the following vulnerability has been resolved:
uio: Fix stale info pointer in failed registration path
After device_add(), the UIO device is visibl...
|
7.0 High | — | 0,15% | 17 Sep 2026 |