Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-20329
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defen...
|
9.9 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20326
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal securit...
|
9.8 Critical | — | 0,39% | 16 Sep 2026 |
|
CVE-2026-20325
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal se...
|
9.9 Critical | — | 0,34% | 16 Sep 2026 |
|
CVE-2026-20324
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacke...
|
9.9 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20322
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal se...
|
9.9 Critical | — | 0,27% | 16 Sep 2026 |
|
CVE-2026-20242
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execu...
|
9.8 Critical | — | 0,64% | 16 Sep 2026 |
|
CVE-2026-20237
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
9.1 Critical | — | 0,33% | 16 Sep 2026 |
|
CVE-2026-20211
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To expl...
|
9.1 Critical | — | 0,56% | 16 Sep 2026 |
|
CVE-2026-20194
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
9.1 Critical | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-20192
cisco identity services engine, cisco identity services engine passive identity connector
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
10.0 Critical | — | 0,46% | 16 Sep 2026 |
|
CVE-2026-20176
A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To expl...
|
9.1 Critical | — | 0,78% | 16 Sep 2026 |
|
CVE-2026-20130
cisco identity services engine, cisco identity services engine passive identity connector
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PI...
|
10.0 Critical | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-92729
SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the HTTP handler. Unauthenticated attackers can submit...
|
8.2 High | — | 0,58% | 16 Sep 2026 |
|
CVE-2026-92473
A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handl...
|
3.3 Low | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-92472
A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deactivate_ex of the file src/scenegraph/base_scenegraph.c of the component...
|
3.3 Low | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-92418
A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability affects unknown code of the file src/main/resources/p...
|
3.5 Low | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-92417
A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component PFCP Handle...
|
6.5 Medium | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-91106
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-91105
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-91104
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,1% | 16 Sep 2026 |
|
CVE-2026-91103
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,97% | 16 Sep 2026 |
|
CVE-2026-91102
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,79% | 16 Sep 2026 |
|
CVE-2026-91101
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,97% | 16 Sep 2026 |
|
CVE-2026-91100
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,72% | 16 Sep 2026 |
|
CVE-2026-91099
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 0,98% | 16 Sep 2026 |
|
CVE-2026-91098
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-91097
hp linux imaging and printing
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable...
|
9.8 Critical | — | 1,0% | 16 Sep 2026 |
|
CVE-2026-86071
Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/github/junrar/LocalFolderExtractor.java can create di...
|
3.7 Low | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-86043
Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWithBody filter can authorize an oversized request a...
|
7.5 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-86003
CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.go, core/dns...
|
7.5 High | — | 0,44% | 16 Sep 2026 |
|
CVE-2026-82399
CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths in plugin/pkg/doh/doh.go, core...
|
7.5 High | — | 0,61% | 16 Sep 2026 |
|
CVE-2026-81876
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/ja...
|
7.5 High | — | 0,63% | 16 Sep 2026 |
|
CVE-2026-81875
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/ja...
|
7.5 High | — | 0,63% | 16 Sep 2026 |
|
CVE-2026-81176
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. Prior to 5.9.2, devalue.parse does not reject...
|
5.3 Medium | — | 0,51% | 16 Sep 2026 |
|
CVE-2026-79298
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi an...
|
8.4 High | — | 0,19% | 16 Sep 2026 |
|
CVE-2026-77360
oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/...
|
6.3 Medium | — | 0,54% | 16 Sep 2026 |
|
CVE-2026-75516
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start() applies Mat...
|
8.7 High | — | 0,55% | 16 Sep 2026 |
|
CVE-2026-75025
mattermost desktop
Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not sufficiently restrict server-rendered content from accessing local or privat...
|
4.7 Medium | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-73462
On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthen...
|
6.5 Medium | — | 0,28% | 16 Sep 2026 |
|
CVE-2026-73457
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be lo...
|
5.3 Medium | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-73456
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craf...
|
10.0 Critical | — | 0,70% | 16 Sep 2026 |
|
CVE-2026-73443
On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is...
|
4.7 Medium | — | 0,27% | 16 Sep 2026 |
|
CVE-2026-73442
On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticat...
|
3.0 Low | — | 0,21% | 16 Sep 2026 |
|
CVE-2026-68536
Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core.
Older unsupported versions may also be affected.
Users are recommended to upgrade to versions...
|
9.8 Critical | — | 0,49% | 16 Sep 2026 |
|
CVE-2026-63325
Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command...
|
7.8 High | — | 0,22% | 16 Sep 2026 |
|
CVE-2026-63225
Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly/cli 2.33.2, the split command constructs output paths under --outDir...
|
4.4 Medium | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-63126
Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacke...
|
7.5 High | — | 0,82% | 16 Sep 2026 |
|
CVE-2026-59823
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can...
|
5.3 Medium | — | 0,44% | 16 Sep 2026 |
|
CVE-2026-46352
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5...
|
7.5 High | — | 0,47% | 16 Sep 2026 |
|
CVE-2026-38999
A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial of Service...
|
7.5 High | — | 1,4% | 16 Sep 2026 |