Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-83019
oracle peoplesoft enterprise peopletools
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploita...
|
8.1 High | — | 0,42% | 15 Sep 2026 |
|
CVE-2026-83018
oracle peoplesoft enterprise peopletools
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploita...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-83017
oracle peoplesoft enterprise peopletools
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-83016
oracle peoplesoft enterprise peopletools
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to ex...
|
7.2 High | — | 0,14% | 15 Sep 2026 |
|
CVE-2026-83015
oracle peoplesoft enterprise peopletools
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Diffic...
|
7.0 High | — | 0,13% | 15 Sep 2026 |
|
CVE-2026-83014
oracle peoplesoft enterprise peopletools
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager). Supported versions that are affected are 8.61-8.63. Easily...
|
8.1 High | — | 0,38% | 15 Sep 2026 |
|
CVE-2026-83013
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-83012
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
7.7 High | — | 0,35% | 15 Sep 2026 |
|
CVE-2026-83011
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected...
|
8.1 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-83010
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.1 High | — | 0,37% | 15 Sep 2026 |
|
CVE-2026-83009
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-83008
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-83007
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.5 High | — | 0,30% | 15 Sep 2026 |
|
CVE-2026-83006
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
9.1 Critical | — | 0,49% | 15 Sep 2026 |
|
CVE-2026-83005
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.8 High | — | 0,43% | 15 Sep 2026 |
|
CVE-2026-83004
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
7.2 High | — | 0,12% | 15 Sep 2026 |
|
CVE-2026-83003
oracle webcenter enterprise capture
Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supported versions that are affected are 12.2.1....
|
8.5 High | — | 0,30% | 15 Sep 2026 |
|
CVE-2026-83002
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
8.5 High | — | 0,33% | 15 Sep 2026 |
|
CVE-2026-83001
oracle access manager
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...
|
9.1 Critical | — | 0,49% | 15 Sep 2026 |
|
CVE-2026-83000
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 an...
|
9.8 Critical | — | 0,48% | 15 Sep 2026 |
|
CVE-2026-82999
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 an...
|
9.9 Critical | — | 0,42% | 15 Sep 2026 |
|
CVE-2026-82998
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 an...
|
9.9 Critical | — | 0,42% | 15 Sep 2026 |
|
CVE-2026-82997
Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). Supported versions that are affected are 12.2.1.4.0 an...
|
9.9 Critical | — | 0,42% | 15 Sep 2026 |
|
CVE-2026-82996
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected...
|
7.8 High | — | 0,14% | 15 Sep 2026 |
|
CVE-2026-82995
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected...
|
9.8 Critical | — | 0,48% | 15 Sep 2026 |
|
CVE-2026-82994
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected...
|
9.8 Critical | — | 0,48% | 15 Sep 2026 |
|
CVE-2026-82993
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63....
|
8.5 High | — | 0,29% | 15 Sep 2026 |
|
CVE-2026-82992
oracle siebel crm
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation). Supported versions that are affected are 17.0-26.7. Easily exploitable...
|
7.8 High | — | 0,16% | 15 Sep 2026 |
|
CVE-2026-81925
concretecms concrete cms
Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An...
|
6.1 Medium | — | 0,27% | 15 Sep 2026 |
|
CVE-2026-76821
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260706.0, the JSON ingestion mapper's extractWithRegexp fo...
|
7.1 High | — | 0,47% | 15 Sep 2026 |
|
CVE-2026-76820
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetch...
|
7.7 High | — | 0,42% | 15 Sep 2026 |
|
CVE-2026-76796
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafte...
|
4.0 Medium | — | 0,18% | 15 Sep 2026 |
|
CVE-2026-76707
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitatio...
|
4.3 Medium | — | 0,23% | 15 Sep 2026 |
|
CVE-2026-76706
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Succ...
|
5.3 Medium | — | 0,42% | 15 Sep 2026 |
|
CVE-2026-76705
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote atta...
|
5.5 Medium | — | 0,54% | 15 Sep 2026 |
|
CVE-2026-76704
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code...
|
5.5 Medium | — | 0,33% | 15 Sep 2026 |
|
CVE-2026-76703
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with...
|
5.5 Medium | — | 0,38% | 15 Sep 2026 |
|
CVE-2026-76702
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful...
|
5.8 Medium | — | 0,11% | 15 Sep 2026 |
|
CVE-2026-76701
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successf...
|
5.9 Medium | — | 0,39% | 15 Sep 2026 |
|
CVE-2026-76700
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could a...
|
5.9 Medium | — | 0,46% | 15 Sep 2026 |
|
CVE-2026-76699
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauth...
|
6.4 Medium | — | 0,22% | 15 Sep 2026 |
|
CVE-2026-76698
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limite...
|
6.5 Medium | — | 4,5% | 15 Sep 2026 |
|
CVE-2026-76697
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to acc...
|
6.5 Medium | — | 0,46% | 15 Sep 2026 |
|
CVE-2026-76696
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitat...
|
6.5 Medium | — | 0,27% | 15 Sep 2026 |
|
CVE-2026-76695
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker...
|
6.5 Medium | — | 0,48% | 15 Sep 2026 |
|
CVE-2026-76694
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authentica...
|
6.6 Medium | — | 0,54% | 15 Sep 2026 |
|
CVE-2026-76693
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running...
|
7.0 High | — | 0,36% | 15 Sep 2026 |
|
CVE-2026-76692
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the n...
|
7.1 High | — | 0,28% | 15 Sep 2026 |
|
CVE-2026-76691
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attac...
|
7.2 High | — | 0,76% | 15 Sep 2026 |
|
CVE-2026-76690
arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system
A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker c...
|
7.2 High | — | 1,1% | 15 Sep 2026 |