Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-92752
metasfresh DocumentAttachmentsRestController and CommentsRestController endpoints check only that callers are logged in without enforcing record-level permissions. Attack...
|
8.3 High | — | 0,46% | 16 Sep 2026 |
|
CVE-2026-92751
CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Atta...
|
8.1 High | — | 0,26% | 16 Sep 2026 |
|
CVE-2026-92750
Harness through 3.3.0 omits access control validation in the infrastructure provider read endpoint, allowing authenticated users to retrieve provider configurations from...
|
6.5 Medium | — | 0,28% | 16 Sep 2026 |
|
CVE-2026-92749
SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Un...
|
8.1 High | — | 0,71% | 16 Sep 2026 |
|
CVE-2026-92748
BC Security Empire before 6.7.1 fails to validate the multipart filename parameter in upload endpoints, allowing authenticated operators to write files to arbitrary paths...
|
8.8 High | — | 0,82% | 16 Sep 2026 |
|
CVE-2026-92527
A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb of the component Shopify OAuth. The manipula...
|
6.3 Medium | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-81872
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop whe...
|
6.3 Medium | — | 0,38% | 16 Sep 2026 |
|
CVE-2026-81871
OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFIC...
|
6.3 Medium | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-81869
OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enforce Attribut...
|
5.1 Medium | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-76460
Advisory
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.
This vulnerability is due t...
|
10.0 Critical | KEV | 14,0% | 16 Sep 2026 |
|
CVE-2026-76451
cisco identity services engine passive identity connector, cisco identity services engine
A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL...
|
4.9 Medium | — | 0,43% | 16 Sep 2026 |
|
CVE-2026-76450
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL...
|
4.9 Medium | — | 0,43% | 16 Sep 2026 |
|
CVE-2026-76449
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL...
|
4.9 Medium | — | 0,43% | 16 Sep 2026 |
|
CVE-2026-76448
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct an SQL...
|
4.9 Medium | — | 0,43% | 16 Sep 2026 |
|
CVE-2026-76447
cisco identity services engine passive identity connector, cisco identity services engine
A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to cause an admi...
|
5.3 Medium | — | 0,38% | 16 Sep 2026 |
|
CVE-2026-76446
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of a...
|
4.9 Medium | — | 0,30% | 16 Sep 2026 |
|
CVE-2026-76444
cisco identity services engine passive identity connector, cisco identity services engine
A vulnerability in an internal service of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to retrieve sensitive configuration information from...
|
5.3 Medium | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-76439
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to...
|
5.3 Medium | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-76438
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges...
|
6.5 Medium | — | 0,56% | 16 Sep 2026 |
|
CVE-2026-76434
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the certificate import functionality of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker...
|
4.9 Medium | — | 0,38% | 16 Sep 2026 |
|
CVE-2026-76433
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the client provisioning download feature of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to access protected files on an...
|
5.3 Medium | — | 1,3% | 16 Sep 2026 |
|
CVE-2026-76432
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to...
|
4.9 Medium | — | 1,2% | 16 Sep 2026 |
|
CVE-2026-76431
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to dele...
|
4.9 Medium | — | 1,2% | 16 Sep 2026 |
|
CVE-2026-76428
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the session databas...
|
4.9 Medium | — | 0,48% | 16 Sep 2026 |
|
CVE-2026-76427
cisco identity services engine
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected dev...
|
4.9 Medium | — | 0,46% | 16 Sep 2026 |
|
CVE-2026-76426
cisco identity services engine, cisco identity services engine passive identity connector
A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct SQL injection attacks against the monitoring datab...
|
4.9 Medium | — | 0,48% | 16 Sep 2026 |
|
CVE-2026-76425
cisco identity services engine
A vulnerability in the APIs of Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks against the backend database.
This vulnerabilit...
|
7.6 High | — | 0,41% | 16 Sep 2026 |
|
CVE-2026-76424
cisco identity services engine
A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device.
This vulnerability...
|
7.2 High | — | 0,92% | 16 Sep 2026 |
|
CVE-2026-76413
A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacke...
|
8.2 High | — | 0,46% | 16 Sep 2026 |
|
CVE-2026-76412
A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger se...
|
8.5 High | — | 0,44% | 16 Sep 2026 |
|
CVE-2026-76409
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
8.8 High | — | 0,53% | 16 Sep 2026 |
|
CVE-2026-75513
Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. From version 7.0.0 until 9.13.0, several Marten LINQ and tenant-management paths interpolate run...
|
9.1 Critical | — | 0,47% | 16 Sep 2026 |
|
CVE-2026-63506
Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUs...
|
8.8 High | — | 0,52% | 16 Sep 2026 |
|
CVE-2026-62997
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model fi...
|
7.7 High | — | 0,69% | 16 Sep 2026 |
|
CVE-2026-20360
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
8.8 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-20352
A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition...
|
8.6 High | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-20350
A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating...
|
4.7 Medium | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-20344
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to perform a SQL injection attack against...
|
8.8 High | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-20343
A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to download sensitive files and use unbounded disk space....
|
7.5 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20342
A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenticated, remote attacker to download arbitrary files from an affected sy...
|
7.7 High | — | 0,55% | 16 Sep 2026 |
|
CVE-2026-20340
A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execute arbitrary commands at the root privilege level.
This vulnera...
|
8.8 High | — | 0,69% | 16 Sep 2026 |
|
CVE-2026-20336
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.8 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-20335
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.1 High | — | 0,28% | 16 Sep 2026 |
|
CVE-2026-20334
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.4 High | — | 0,26% | 16 Sep 2026 |
|
CVE-2026-20333
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
8.8 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-20332
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
9.9 Critical | — | 0,30% | 16 Sep 2026 |
|
CVE-2026-20323
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent at...
|
8.3 High | — | 0,09% | 16 Sep 2026 |
|
CVE-2026-20309
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross...
|
6.1 Medium | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-20300
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected device. To exploit this vulnerability, the atta...
|
7.1 High | — | 0,29% | 16 Sep 2026 |
|
CVE-2026-20295
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote atta...
|
8.6 High | — | 0,55% | 16 Sep 2026 |