Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-89848
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Quiesce response IRQ before freeing request queue
qla2xxx_delete_qpair() deletes the...
|
8.1 High | — | 0,52% | 16 Sep 2026 |
|
CVE-2026-89847
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Avoid double completion in async IOCB timeout
qla2x00_async_iocb_timeout() tries to a...
|
9.8 Critical | — | 0,68% | 16 Sep 2026 |
|
CVE-2026-89846
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
In qla2x00_status_entry(), the FWI2 s...
|
9.1 Critical | — | 0,71% | 16 Sep 2026 |
|
CVE-2026-89844
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
qla24xx_report_id_acqui...
|
8.8 High | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-89841
In the Linux kernel, the following vulnerability has been resolved:
f2fs: only redirty pinned folios in redirty_blocks
redirty_blocks() pins folios with read_cache_foli...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89840
In the Linux kernel, the following vulnerability has been resolved:
f2fs: validate MOVE_RANGE destination size
F2FS_IOC_MOVE_RANGE checks the source range, but not the...
|
7.1 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89838
In the Linux kernel, the following vulnerability has been resolved:
f2fs: limit recovery filename logging to stored length
F2FS stores recovery filenames as a length pl...
|
7.1 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89836
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix folio_nr_pages() race after put in large folio invalidate
Our v6.18 based Android system i...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89832
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to clear dirty flag on folio in error path
If node block is corrupted due to chksum mismat...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89829
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()
Otherwise in f2fs_sanity_check_nod...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89826
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: harden firmware build-info bounds checks
panthor_fw_read_build_info() checks whether th...
|
7.1 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89825
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: fix firmware control interface bounds checks
panthor_init_cs_iface() and panthor_init_c...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89823
In the Linux kernel, the following vulnerability has been resolved:
drm: fix race between partial drm_dev_register() failure and ioctl
If drm_dev_register() fails after...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89819
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: validate plane degamma LUT size for private color prop
Unlike the CRTC degamma path...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89818
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
If the supplied msg[2] (num_buffe...
|
7.1 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89815
In the Linux kernel, the following vulnerability has been resolved:
drm/ttm: Drop tt->restore after successful restore
ttm_pool_restore_and_alloc() can successfully com...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89814
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: clamp the isolation index for rings outside a partition
adev->isolation[] has one slot p...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89811
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
MES (Micro Engine Scheduler) does not...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89810
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
If page migration from device to sys ram fails...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89808
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
When migration vm range i...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89806
In the Linux kernel, the following vulnerability has been resolved:
drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
The framebuffer size calculation `fb_s...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89805
In the Linux kernel, the following vulnerability has been resolved:
drm/pagemap: Fix folio allocation fallback and use-after-put
drm_pagemap_migrate_populate_ram_pfn()...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89804
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau/dmem: fix mismatched DMA unmap size for large folios
Device-private THP migration maps m...
|
8.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89803
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau: unsubscribe the channel-kill event before the fence context
nouveau_channel_del() tears...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89801
In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
In nouveau_uvmm_bind_job_submi...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89799
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disable preemption in bpf_get_stackid
The get_perf_callchain call needs disabled preemption plu...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89795
In the Linux kernel, the following vulnerability has been resolved:
PCI: Allow per function PCI slots to fix slot reset on s390
On s390 systems, which use a machine lev...
|
8.4 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-86585
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the deliv...
|
7.7 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-86107
The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerabil...
|
5.9 Medium | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-86106
An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated co...
|
9.6 Critical | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-14916
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise....
|
7.7 High | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-89793
In the Linux kernel, the following vulnerability has been resolved:
ublk: clear VM_MAYWRITE on read-only ublk char device mmap
ublk_ch_mmap() rejects mmap requests with...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-86792
apache-airflow-providers-apache-kafka
Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `impor...
|
8.8 High | — | 1,2% | 16 Sep 2026 |
|
CVE-2026-86474
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform m...
|
7.7 High | — | 0,13% | 16 Sep 2026 |
|
CVE-2026-86466
apache-airflow-providers-fab
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the id_token it accepts. An attacker hold...
|
8.1 High | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-86443
Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrie...
|
6.9 Medium | — | 0,10% | 16 Sep 2026 |
|
CVE-2026-85628
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions pri...
|
7.0 High | — | 0,09% | 16 Sep 2026 |
|
CVE-2026-84501
apache zookeeper
An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble", ...) request containing...
|
5.3 Medium | — | 0,74% | 16 Sep 2026 |
|
CVE-2026-84439
apache zookeeper
When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest...
|
5.3 Medium | — | 0,74% | 16 Sep 2026 |
|
CVE-2026-82310
apache-airflow-providers-fab
Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation. Password authentication correctly rejects the di...
|
7.2 High | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-79993
apache zookeeper
The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the dat...
|
7.5 High | — | 0,60% | 16 Sep 2026 |
|
CVE-2026-77190
On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG...
|
6.5 Medium | — | 0,28% | 16 Sep 2026 |
|
CVE-2026-76187
apache-airflow-providers-keycloak
Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confidential client registered in the Keycloak realm, not...
|
9.8 Critical | — | 0,98% | 16 Sep 2026 |
|
CVE-2026-76186
apache-airflow-providers-keycloak
Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Airflow session token but takes the Keycloak access a...
|
9.1 Critical | — | 0,81% | 16 Sep 2026 |
|
CVE-2026-76151
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11...
|
4.6 Medium | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-73469
When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be subjected to the intended verif...
|
5.8 Medium | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-73468
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss...
|
6.5 Medium | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-73455
On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart une...
|
7.5 High | — | 0,50% | 16 Sep 2026 |
|
CVE-2026-73453
An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected...
|
10.0 Critical | — | 0,70% | 16 Sep 2026 |
|
CVE-2026-73440
On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way ha...
|
4.2 Medium | — | 0,27% | 16 Sep 2026 |