Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-68950
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable.
|
8.8 High | — | 0,35% | 15 Sep 2026 |
|
CVE-2026-68491
An insufficient check allowed for the overwrite of arbitrary files via a symlink.
|
9.4 Critical | — | 0,46% | 15 Sep 2026 |
|
CVE-2026-68070
The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system comman...
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-66890
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable.
|
9.6 Critical | — | 0,33% | 15 Sep 2026 |
|
CVE-2026-66887
The affected products are missing authorization on state-changing CGIs and session checks are not performed.
|
9.6 Critical | — | 0,33% | 15 Sep 2026 |
|
CVE-2026-66372
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.
|
6.8 Medium | — | 0,28% | 15 Sep 2026 |
|
CVE-2026-61568
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin...
|
9.6 Critical | — | 0,53% | 15 Sep 2026 |
|
CVE-2026-61559
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENABLE_DYNAMIC...
|
9.6 Critical | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-61554
emp3r0r is a C2 designed by Linux users for Linux environments. Prior to version 4.2.5, the `http_poll` C2 transport accepts attacker-controlled HTTP polling sessions bef...
|
7.5 High | — | 0,71% | 15 Sep 2026 |
|
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login_required d...
|
7.2 High | — | 0,41% | 15 Sep 2026 |
|
CVE-2026-54337
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injection in the video upload function allows unauthenticated attacker to w...
|
9.8 Critical | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-19655
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DH...
|
6.5 Medium | — | 0,19% | 15 Sep 2026 |
|
CVE-2026-18426
concretecms concrete cms
Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF t...
|
6.5 Medium | — | 0,21% | 15 Sep 2026 |
|
CVE-2026-92240
mozilla thunderbird
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The aff...
|
9.1 Critical | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-92239
mozilla thunderbird
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
|
8.1 High | — | 0,41% | 15 Sep 2026 |
|
CVE-2026-92238
mozilla thunderbird
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbir...
|
9.8 Critical | — | 0,54% | 15 Sep 2026 |
|
CVE-2026-89040
Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target de...
|
9.8 Critical | — | 1,1% | 15 Sep 2026 |
|
CVE-2026-89027
miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated att...
|
6.5 Medium | — | 0,38% | 15 Sep 2026 |
|
CVE-2026-88975
Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 read loop parses a frame’s 24-bit declared length but waits to buffer the en...
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-88922
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive...
|
6.7 Medium | — | 0,11% | 15 Sep 2026 |
|
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags.
|
6.1 Medium | — | 0,26% | 15 Sep 2026 |
|
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field.
|
5.4 Medium | — | 0,24% | 15 Sep 2026 |
|
CVE-2026-87289
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Eas...
|
7.5 High | — | 0,47% | 15 Sep 2026 |
|
CVE-2026-87288
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to ex...
|
8.1 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-87287
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to ex...
|
8.1 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-87286
Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to ex...
|
8.1 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-87285
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
6.0 Medium | — | 0,17% | 15 Sep 2026 |
|
CVE-2026-87284
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
3.2 Low | — | 0,15% | 15 Sep 2026 |
|
CVE-2026-87283
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
6.0 Medium | — | 0,17% | 15 Sep 2026 |
|
CVE-2026-87282
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
6.0 Medium | — | 0,17% | 15 Sep 2026 |
|
CVE-2026-87281
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
3.2 Low | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87280
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
4.2 Medium | — | 0,15% | 15 Sep 2026 |
|
CVE-2026-87279
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
6.1 Medium | — | 0,15% | 15 Sep 2026 |
|
CVE-2026-87278
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
6.1 Medium | — | 0,15% | 15 Sep 2026 |
|
CVE-2026-87277
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
7.5 High | — | 0,47% | 15 Sep 2026 |
|
CVE-2026-87276
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vul...
|
7.5 High | — | 0,13% | 15 Sep 2026 |
|
CVE-2026-87275
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
4.6 Medium | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87274
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vul...
|
4.4 Medium | — | 0,12% | 15 Sep 2026 |
|
CVE-2026-87273
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
8.6 High | — | 0,18% | 15 Sep 2026 |
|
CVE-2026-87272
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87271
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87270
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87269
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87268
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulne...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-87267
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vul...
|
5.3 Medium | — | 0,34% | 15 Sep 2026 |
|
CVE-2026-87266
oracle agile product lifecycle management
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitabl...
|
8.2 High | — | 0,44% | 15 Sep 2026 |
|
CVE-2026-87265
oracle purchasing
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Other issue). Supported versions that are affected are 12.2.3-12.2.15. Easily explo...
|
8.1 High | — | 0,36% | 15 Sep 2026 |
|
CVE-2026-87264
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63....
|
7.7 High | — | 0,30% | 15 Sep 2026 |
|
CVE-2026-87262
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version tha...
|
7.1 High | — | 0,24% | 15 Sep 2026 |
|
CVE-2026-87261
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version tha...
|
7.3 High | — | 0,14% | 15 Sep 2026 |