Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-73955
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Charting). Supported versions that are affected are 8.61-8.63. Easily exp...
|
7.3 High | — | 0,32% | 15 Sep 2026 |
|
CVE-2026-73954
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63....
|
8.1 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-73953
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-73952
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
|
9.1 Critical | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-73951
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
|
8.1 High | — | 0,39% | 15 Sep 2026 |
|
CVE-2026-73950
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-73949
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services). Supported versions that are affected are 12.2.1.4.0 and...
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-73948
oracle webcenter portal
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0...
|
9.9 Critical | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-73947
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-73946
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.1 Critical | — | 0,49% | 15 Sep 2026 |
|
CVE-2026-73945
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.9 Critical | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-73944
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.1 Critical | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-73943
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14....
|
7.6 High | — | 0,34% | 15 Sep 2026 |
|
CVE-2026-73942
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-73941
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
8.6 High | — | 0,41% | 15 Sep 2026 |
|
CVE-2026-73940
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-73926
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
8.7 High | — | 0,41% | 15 Sep 2026 |
|
CVE-2026-73458
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD ses...
|
8.2 High | — | 0,40% | 15 Sep 2026 |
|
CVE-2026-71163
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.9 Critical | — | 0,39% | 15 Sep 2026 |
|
CVE-2026-71133
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
10.0 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-71047
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-70915
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-70913
oracle identity manager
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0....
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-70757
oracle weblogic server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1....
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-70756
oracle weblogic server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1....
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-70755
Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). Supported versions that are affected are 1...
|
6.5 Medium | — | 0,34% | 15 Sep 2026 |
|
CVE-2026-70748
oracle weblogic server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1....
|
9.8 Critical | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-69218
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 HEADERS or PUSH_PROMISE frame without END_HEADERS, H2Connecti...
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-69217
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/1.1 parser accepts differing duplicate Content-Length headers and uses the las...
|
8.7 High | — | 0,50% | 15 Sep 2026 |
|
CVE-2026-69215
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain...
|
6.8 Medium | — | 0,51% | 15 Sep 2026 |
|
CVE-2026-69210
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAX_VAL...
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-69206
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count val...
|
5.9 Medium | — | 0,40% | 15 Sep 2026 |
|
CVE-2026-69205
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HeaderP.parse uses a case-sensitive substring test for the Transfer-Encoding value...
|
8.7 High | — | 0,48% | 15 Sep 2026 |
|
CVE-2026-69203
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 enabled through withHttp2 does not enforce SETTINGS_MAX_CONCURR...
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-69202
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the netw...
|
7.5 High | — | 0,63% | 15 Sep 2026 |
|
CVE-2026-62597
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). Supported versions that are affected are...
|
6.5 Medium | — | 0,30% | 15 Sep 2026 |
|
CVE-2026-61544
libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a...
|
8.2 High | — | 0,28% | 15 Sep 2026 |
|
CVE-2026-51134
The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml.
|
7.5 High | — | 1,7% | 15 Sep 2026 |
|
CVE-2026-51133
Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in pt...
|
6.1 Medium | — | 0,91% | 15 Sep 2026 |
|
CVE-2026-32599
Netmaker makes networks with WireGuard. Prior to version 1.5.0, the `sqliteDeleteRecord` function in Netmaker's database layer constructs SQL `DELETE` statements using di...
|
5.3 Medium | — | 0,36% | 15 Sep 2026 |
|
CVE-2026-18425
concretecms concrete cms
Concrete CMS 9 before 9.5.3 authorized the dashboard sitemap reorder action (Concrete\Controller\Backend\Dashboard\SitemapUpdate) using only the global access_sitemap tas...
|
2.7 Low | — | 0,12% | 15 Sep 2026 |
|
CVE-2026-18424
concretecms concrete cms
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs...
|
7.1 High | — | 0,24% | 15 Sep 2026 |
|
CVE-2026-18423
concretecms concrete cms
Concrete CMS 9.0.0 through 9.5.2 is vulnerable to Insecure direct object reference (IDOR) in the Express saved search preset delete and edit dialogs . An authenticated u...
|
7.1 High | — | 0,25% | 15 Sep 2026 |
|
CVE-2026-18422
concretecms concrete cms
Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in the multilingual page assignment backend action (Bac...
|
6.5 Medium | — | 0,44% | 15 Sep 2026 |
|
CVE-2026-13327
Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept pri...
|
8.3 High | — | 0,13% | 15 Sep 2026 |
|
CVE-2026-92180
pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attack...
|
7.8 High | — | 0,19% | 15 Sep 2026 |
|
CVE-2026-92179
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a...
|
7.8 High | — | 0,23% | 15 Sep 2026 |
|
CVE-2026-92178
pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff...
|
7.8 High | — | 0,23% | 15 Sep 2026 |
|
CVE-2026-92177
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a...
|
7.8 High | — | 0,23% | 15 Sep 2026 |
|
CVE-2026-92176
pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...
|
7.8 High | — | 0,23% | 15 Sep 2026 |