Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-88592
kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the tru...
|
9.1 Critical | — | 0,21% | 16 Sep 2026 |
|
CVE-2026-87976
apache nifi
Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploa...
|
8.1 High | — | 0,79% | 16 Sep 2026 |
|
CVE-2026-87116
Tanium addressed a server-side request forgery vulnerability in Threat Response.
|
6.5 Medium | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-87113
Tanium addressed an improper access controls vulnerability in Threat Response.
|
6.3 Medium | — | 0,26% | 16 Sep 2026 |
|
CVE-2026-87105
Tanium addressed a SQL injection vulnerability in Threat Response.
|
8.8 High | — | 0,43% | 16 Sep 2026 |
|
CVE-2026-87076
Tanium addressed an information disclosure vulnerability in Discover.
|
6.5 Medium | — | 0,38% | 16 Sep 2026 |
|
CVE-2026-87026
Tanium addressed an improper access controls vulnerability in Threat Response.
|
3.8 Low | — | 0,26% | 16 Sep 2026 |
|
CVE-2026-87024
Tanium addressed a SQL injection vulnerability in Asset.
|
7.2 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-86865
Tanium addressed a SQL injection vulnerability in Asset.
|
7.2 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-86831
Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to...
|
8.7 High | — | 0,64% | 16 Sep 2026 |
|
CVE-2026-86089
apache nifi
Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and...
|
7.1 High | — | 0,44% | 16 Sep 2026 |
|
CVE-2026-82561
apache nifi
Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Gr...
|
6.5 Medium | — | 0,48% | 16 Sep 2026 |
|
CVE-2026-81870
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level d...
|
2.0 Low | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-81866
apache nifi
Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets...
|
4.3 Medium | — | 0,56% | 16 Sep 2026 |
|
CVE-2026-76646
A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition....
|
7.5 High | — | 0,58% | 16 Sep 2026 |
|
CVE-2026-76423
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain administrative access to an affected device.
Thi...
|
10.0 Critical | — | 0,58% | 16 Sep 2026 |
|
CVE-2026-70469
apache nifi
Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header i...
|
7.5 High | — | 0,62% | 16 Sep 2026 |
|
CVE-2026-62949
AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0...
|
6.5 Medium | — | 0,39% | 16 Sep 2026 |
|
CVE-2026-20361
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
8.8 High | — | 0,28% | 16 Sep 2026 |
|
CVE-2026-20341
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote attacker to obtain root privile...
|
9.1 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20330
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
9.9 Critical | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-20329
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
9.9 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20326
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
9.8 Critical | — | 0,39% | 16 Sep 2026 |
|
CVE-2026-20325
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal se...
|
9.9 Critical | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-20324
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacke...
|
9.9 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20322
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal se...
|
9.9 Critical | — | 0,27% | 16 Sep 2026 |
|
CVE-2026-20242
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execu...
|
9.8 Critical | — | 0,64% | 16 Sep 2026 |
|
CVE-2026-20237
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
9.1 Critical | — | 0,33% | 16 Sep 2026 |
|
CVE-2026-20211
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To expl...
|
9.1 Critical | — | 0,56% | 16 Sep 2026 |
|
CVE-2026-20194
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
9.1 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20192
cisco identity services engine, cisco identity services engine passive identity connector
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
10.0 Critical | — | 0,46% | 16 Sep 2026 |
|
CVE-2026-20176
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To expl...
|
9.1 Critical | — | 0,78% | 16 Sep 2026 |
|
CVE-2026-20130
cisco identity services engine, cisco identity services engine passive identity connector
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
10.0 Critical | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-92729
SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit...
|
8.2 High | — | 0,58% | 16 Sep 2026 |
|
CVE-2026-92473
A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handl...
|
3.3 Low | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-92472
A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deactivate_ex of the file src/scenegraph/base_scenegraph.c of the component...
|
3.3 Low | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-92418
A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/p...
|
3.5 Low | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-92417
A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handle...
|
6.5 Medium | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-91106
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-91105
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-91104
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,1% | 16 Sep 2026 |
|
CVE-2026-91103
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,97% | 16 Sep 2026 |
|
CVE-2026-91102
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,79% | 16 Sep 2026 |
|
CVE-2026-91101
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,97% | 16 Sep 2026 |
|
CVE-2026-91100
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,72% | 16 Sep 2026 |
|
CVE-2026-91099
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,98% | 16 Sep 2026 |
|
CVE-2026-91098
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-91097
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-86071
Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create di...
|
3.7 Low | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-86043
Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWithBody filter can authorize an oversized request a...
|
7.5 High | — | 0,45% | 16 Sep 2026 |