Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-76412
A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger se...
|
8.5 High | — | 0,44% | 16 Sep 2026 |
|
CVE-2026-76409
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
8.8 High | — | 0,53% | 16 Sep 2026 |
|
CVE-2026-75513
Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate run...
|
9.1 Critical | — | 0,47% | 16 Sep 2026 |
|
CVE-2026-63506
Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUs...
|
8.8 High | — | 0,52% | 16 Sep 2026 |
|
CVE-2026-62997
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model fi...
|
7.7 High | — | 0,69% | 16 Sep 2026 |
|
CVE-2026-20360
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
8.8 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-20352
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition...
|
8.6 High | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-20350
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating...
|
4.7 Medium | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-20344
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against...
|
8.8 High | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-20343
A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space....
|
7.5 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20342
A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected sy...
|
7.7 High | — | 0,55% | 16 Sep 2026 |
|
CVE-2026-20340
A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level.
This vulnera...
|
8.8 High | — | 0,69% | 16 Sep 2026 |
|
CVE-2026-20336
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.8 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-20335
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.1 High | — | 0,28% | 16 Sep 2026 |
|
CVE-2026-20334
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.4 High | — | 0,26% | 16 Sep 2026 |
|
CVE-2026-20333
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.8 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-20332
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
9.9 Critical | — | 0,30% | 16 Sep 2026 |
|
CVE-2026-20323
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent at...
|
8.3 High | — | 0,09% | 16 Sep 2026 |
|
CVE-2026-20309
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross...
|
6.1 Medium | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-20300
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the atta...
|
7.1 High | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-20295
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote atta...
|
8.6 High | — | 0,55% | 16 Sep 2026 |
|
CVE-2026-20290
A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remo...
|
5.8 Medium | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-20287
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
6.5 Medium | — | 0,21% | 16 Sep 2026 |
|
CVE-2026-20286
A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could allow an authenticated, remote attacker to modify parts of the configu...
|
4.3 Medium | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-20285
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authentica...
|
4.3 Medium | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-20284
A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks.
This vulnerability is due to insuffici...
|
9.1 Critical | — | 0,39% | 16 Sep 2026 |
|
CVE-2026-20283
A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote attacker to inject arbitrary commands on the underlying operating system....
|
6.5 Medium | — | 0,43% | 16 Sep 2026 |
|
CVE-2026-20282
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device.
This vulner...
|
4.9 Medium | — | 0,56% | 16 Sep 2026 |
|
CVE-2026-20250
A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)...
|
8.6 High | — | 0,55% | 16 Sep 2026 |
|
CVE-2026-20249
A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) So...
|
8.6 High | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-20248
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Soft...
|
6.8 Medium | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-20247
A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected device.
This vulnerability is due to impro...
|
7.5 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-20235
A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive information on an affected device. To e...
|
4.9 Medium | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-20222
A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software co...
|
7.4 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-20154
A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewal...
|
8.6 High | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-20135
A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected...
|
8.6 High | — | 0,46% | 16 Sep 2026 |
|
CVE-2026-20121
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Se...
|
5.3 Medium | — | 0,49% | 16 Sep 2026 |
|
CVE-2026-20120
A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Se...
|
5.8 Medium | — | 0,41% | 16 Sep 2026 |
|
CVE-2026-20072
A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from network users that a...
|
4.9 Medium | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-20071
A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding sessi...
|
3.8 Low | — | 0,15% | 16 Sep 2026 |
|
CVE-2025-56566
MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage. An attacker with physical access to the d...
|
4.6 Medium | — | 0,16% | 16 Sep 2026 |
|
CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed...
|
7.6 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2025-56563
A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0. The script accepts an attacker-controlled address URL parameter and p...
|
9.8 Critical | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-92808
A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Enterprise Server. An unauthenticated network attacker can cause the serve...
|
10.0 Critical | — | 0,56% | 16 Sep 2026 |
|
CVE-2026-92526
A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the a...
|
6.3 Medium | — | 0,33% | 16 Sep 2026 |
|
CVE-2026-92475
A weakness has been identified in GPAC 26.08-DEV. This impacts the function wait_for_header_and_parse of the file src/utils/downloader.c. This manipulation of the argumen...
|
5.3 Medium | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-92474
A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline_get_proto_lib of the file src/compositor/mpeg4_inline.c of the component Proto...
|
3.3 Low | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89084
HP
has identified potential security vulnerabilities in the HP Advance software
that may enable elevation of privilege, remote code execution, or arbitrary
file write und...
|
8.8 High | — | 0,78% | 16 Sep 2026 |
|
CVE-2026-89083
HP
has identified potential security vulnerabilities in the HP Advance software
that may enable elevation of privilege, remote code execution, or arbitrary
file write und...
|
9.3 Critical | — | 0,70% | 16 Sep 2026 |
|
CVE-2026-89082
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write und...
|
9.3 Critical | — | 0,70% | 16 Sep 2026 |