Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-58146
WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through...
|
9.4 Critical | — | 2,9% | 16 Sep 2026 |
|
CVE-2026-40857
WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_...
|
8.4 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-40856
WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentica...
|
7.1 High | — | 0,37% | 16 Sep 2026 |
|
CVE-2026-40855
WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifica...
|
9.3 Critical | — | 1,6% | 16 Sep 2026 |
|
CVE-2026-40854
WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the se...
|
8.7 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-92357
A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-processor.ts of the component Model Processor. The mani...
|
4.3 Medium | — | 0,39% | 16 Sep 2026 |
|
CVE-2026-92356
A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the file basic_functions.ts of the component Update Com...
|
4.3 Medium | — | 0,52% | 16 Sep 2026 |
|
CVE-2026-90049
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()
skb_zerocopy() copies frags from...
|
9.3 Critical | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90048
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
ni_create_attr_list() allocates a fi...
|
9.8 Critical | — | 0,67% | 16 Sep 2026 |
|
CVE-2026-90047
In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Don't hand out the flat CCS storage as usable VRAM
get_flat_ccs_offset() reads the base of t...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90046
In the Linux kernel, the following vulnerability has been resolved:
mm/page_alloc: don't spin_trylock() in NMI on UP
Patch series "mm/page_alloc: fixes for free_pages_n...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90045
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: ffs: fix mm lifetime handling
io_data stores a pointer to the submitting task's mm_stru...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90044
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_fs: Fix Use-After-Free in AIO error path
In ffs_epfile_write_iter() and ffs_epfile_re...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90043
In the Linux kernel, the following vulnerability has been resolved:
zram: fix slot lock bit position on big-endian 64-bit
The slot lock is a bit operation on the whole...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90042
In the Linux kernel, the following vulnerability has been resolved:
ceph: properly decrypt filenames in vmalloc() buffers
The fscrypt subsystem uses the scatterlist cry...
|
9.8 Critical | — | 0,50% | 16 Sep 2026 |
|
CVE-2026-90041
In the Linux kernel, the following vulnerability has been resolved:
HID: sony: clean up device list on probe failure
sony_input_configured() adds some controllers to so...
|
8.8 High | — | 0,30% | 16 Sep 2026 |
|
CVE-2026-90038
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during export state revocation
nfsd4_revoke_export_states() has...
|
9.8 Critical | — | 0,55% | 16 Sep 2026 |
|
CVE-2026-90037
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during close_lru reaping
An nfs4_openowner left on nn->close_lru...
|
9.8 Critical | — | 0,48% | 16 Sep 2026 |
|
CVE-2026-90036
In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent client use-after-free during blocked-lock reaping
A bare lock owner -- its only remain...
|
9.8 Critical | — | 0,47% | 16 Sep 2026 |
|
CVE-2026-90032
In the Linux kernel, the following vulnerability has been resolved:
media: usbtv: keep device alive while ALSA card exists
The ALSA PCM callbacks store the driver state...
|
7.8 High | — | 0,15% | 16 Sep 2026 |
|
CVE-2026-90030
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: clear forceRM when issuing EndTransfer
The forceRM bit of the DEPCMD register controls th...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90027
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
cc_debounce_dwork is queued from the...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90026
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: qcom-pmic: cancel reset_work on stop
pdphy_stop() disables IRQs but leaves reset_work pe...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90025
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: displayport: Fix OOB altmode array index
The UCSI displayport driver indexes the c...
|
7.7 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90022
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_midi2: fix use-after-free in string attribute show path
f_midi2_opts_str_show() takes...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90018
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
rtw_get_wps_attr() walks WPS...
|
8.8 High | — | 0,45% | 16 Sep 2026 |
|
CVE-2026-90017
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
rtw_action_frame_parse() takes a frame_...
|
7.1 High | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-90016
In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
rtw_restruct_wmm_ie() scans in_ie for a WM...
|
7.1 High | — | 0,40% | 16 Sep 2026 |
|
CVE-2026-90014
In the Linux kernel, the following vulnerability has been resolved:
tracing: Have show_event_filters/triggers files take trace array ref
The newly added files show_even...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90013
In the Linux kernel, the following vulnerability has been resolved:
tracing: Take trace_array reference when opening options file
The options files do not take the trac...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90012
In the Linux kernel, the following vulnerability has been resolved:
spi: Fix DMA mapping ownership on partial map failure
If RX mapping fails after TX mapping succeeds,...
|
9.8 Critical | — | 0,63% | 16 Sep 2026 |
|
CVE-2026-90011
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: iscsi: Reserve a terminator byte for the login payload
iscsi_target_check_login_reques...
|
9.1 Critical | — | 0,82% | 16 Sep 2026 |
|
CVE-2026-90010
In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg: Cap io_uring sense copy to max_response_len
Completion copied scmd->sense_len to the user...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90009
In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg: Fix TOCTOU in io_uring passthrough command setup
scsi_bsg_uring_cmd() reads bsg_uring_cmd...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90008
In the Linux kernel, the following vulnerability has been resolved:
scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
megasas_make_prp_nvme() builds a...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90007
In the Linux kernel, the following vulnerability has been resolved:
scsi: pm8001: Use rollback index when freeing MSI-X vectors
pm8001_request_msix() unwinds previously...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-90003
In the Linux kernel, the following vulnerability has been resolved:
futex: Prevent rcuwait use-after-free during requeue PI
On PREEMPT_RT, FUTEX_CMP_REQUEUE_PI can trig...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-90002
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Take trace_array reference before accessing its ftrace_ops
The trace instance files set_ftra...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-90001
In the Linux kernel, the following vulnerability has been resolved:
HID: bpf: serialize device reference release in struct_ops destroy path
__hid_bpf_ops_destroy_device...
|
7.8 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-90000
In the Linux kernel, the following vulnerability has been resolved:
HID: rmi: fix OOB access with undersized RMI reports
The hid-rmi driver sizes its writeReport/readRe...
|
8.8 High | — | 0,35% | 16 Sep 2026 |
|
CVE-2026-89999
In the Linux kernel, the following vulnerability has been resolved:
HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
wacom_intuos_pro2_bt_irq() receives t...
|
8.1 High | — | 0,36% | 16 Sep 2026 |
|
CVE-2026-89998
In the Linux kernel, the following vulnerability has been resolved:
dm: fix race when loading and unloading a table
If the userspace calls two concurrent table load ioc...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-8462
SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or...
|
8.9 High | — | 0,51% | 16 Sep 2026 |
|
CVE-2026-89997
In the Linux kernel, the following vulnerability has been resolved:
dm: fix resume-vs-remove race
If the user issues the resume ioctl and the remove ioctl at the same
t...
|
7.8 High | — | 0,16% | 16 Sep 2026 |
|
CVE-2026-89995
In the Linux kernel, the following vulnerability has been resolved:
dma-direct: return struct page from dma_direct_alloc_from_pool()
Commit 5b138c534fda ("dma-direct: f...
|
8.8 High | — | 0,32% | 16 Sep 2026 |
|
CVE-2026-89994
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: fsl-edma: tracing: no ptr dereference during log output
The fsl edma events store a point...
|
7.8 High | — | 0,20% | 16 Sep 2026 |
|
CVE-2026-89992
In the Linux kernel, the following vulnerability has been resolved:
cpuidle: dt_idle_genpd: kfree() the original name allocation
dt_idle_pd_alloc() kasprintf()s the ful...
|
8.4 High | — | 0,18% | 16 Sep 2026 |
|
CVE-2026-89990
In the Linux kernel, the following vulnerability has been resolved:
ceph: lock mutex in ceph_mds_check_access()
MDS session OPEN handling replaces mdsc->s_cap_auths und...
|
9.8 Critical | — | 0,61% | 16 Sep 2026 |
|
CVE-2026-89988
In the Linux kernel, the following vulnerability has been resolved:
kprobes: Protect kprobe_blacklist with RCU
__within_kprobe_blacklist() traverses kprobe_blacklist wi...
|
7.8 High | — | 0,17% | 16 Sep 2026 |
|
CVE-2026-89986
In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
syzbot reported a sl...
|
7.8 High | — | 0,16% | 16 Sep 2026 |