Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-80991
In the Linux kernel, the following vulnerability has been resolved:
net: ravb: serialize PTP clock teardown
ravb_ptp_interrupt() can race with ravb_ptp_stop() and pass...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80977
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: don't touch shared zerocopy state in skb_tx_error()
skb_tx_error() completes the zeroco...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80978
In the Linux kernel, the following vulnerability has been resolved:
net: cap advertised IP tunnel headroom
IP tunnel devices derive their advertised needed_headroom fro...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80979
In the Linux kernel, the following vulnerability has been resolved:
net/smc: unregister the connection before draining the rx tasklet
smc_conn_free() calls smc_ism_unse...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80980
In the Linux kernel, the following vulnerability has been resolved:
net/smc: stop killed, freed and out_of_sync sharing a byte
The three connection state flags are sing...
|
9.8 Critical | — | 0,64% | 11 Sep 2026 |
|
CVE-2026-80981
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
smc_llc_srv_add_link() keeps...
|
9.8 Critical | — | 0,63% | 11 Sep 2026 |
|
CVE-2026-80982
In the Linux kernel, the following vulnerability has been resolved:
net/smc: fix use-after-free in smc_rx_pipe_buf_release()
smc_rx_splice() hands RMB pages to a pipe a...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80971
In the Linux kernel, the following vulnerability has been resolved:
ALSA: bcd2000: clear the URB pointers on disconnect
bcd2000_free_usb_related_resources() frees both...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80975
In the Linux kernel, the following vulnerability has been resolved:
mfd: qnap-mcu: keep the reply buffer alive past a command timeout
qnap_mcu_exec() publishes an on-st...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80976
In the Linux kernel, the following vulnerability has been resolved:
seg6: reset IP6CB after IPv6 decapsulation
decap_and_validate() pulls the outer SRv6 headers and mak...
|
9.8 Critical | — | 0,71% | 11 Sep 2026 |
|
CVE-2026-80962
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: validate geometry fields from on-disk cache_info
cache_segs_init() iterates cache_info->n...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80967
In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
pcxhr_probe() requests pcxhr_threaded...
|
8.4 High | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-80953
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: adi: initialize the lock before enabling interrupts
adi_i3c_master_probe() requests the...
|
8.4 High | — | 0,19% | 11 Sep 2026 |
|
CVE-2026-80954
In the Linux kernel, the following vulnerability has been resolved:
i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()
i3c_device_get_su...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80955
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
In kset_replay, when key->...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80958
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: clamp the tail kset read to the segment data region
The tail-kset read in cache_replay(),...
|
7.1 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80959
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: bound the persisted tail-position offset
cache_pos_decode() takes the persisted key_tail...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80961
In the Linux kernel, the following vulnerability has been resolved:
dm-pcache: validate kset key_num and intra-segment bounds
Two more fields decoded from the cache dev...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80945
In the Linux kernel, the following vulnerability has been resolved:
crypto: iaa - unmap dst before software fallback on decompress
On a hardware analytics error, decomp...
|
9.1 Critical | — | 0,50% | 11 Sep 2026 |
|
CVE-2026-80947
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
rtl8xxxu arms rx_urb_wq from the RX comple...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80950
In the Linux kernel, the following vulnerability has been resolved:
i3c: renesas: Check that the transfer is valid before accessing it
The Renesas I3C driver uses an as...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80952
In the Linux kernel, the following vulnerability has been resolved:
i3c: master: Fix info leak and UAF in device unregister path
i3c_master_unregister_i3c_devs() clears...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80943
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids
rtl92du_tx_fill_desc() uses ieee80211_g...
|
7.6 High | — | 0,24% | 11 Sep 2026 |
|
CVE-2026-80944
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: Detach sync cmd buffer on interrupted wait
mwifiex synchronous commands keep the call...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80932
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: flush works in dependency order
virtio_vsock_remove() stops the virtqueues and then fl...
|
8.4 High | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-80933
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: validate default EEPROM firmware size
The default EEPROM firmware is parsed and...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80935
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy
mt7996_mcu_get_eeprom() de...
|
8.8 High | — | 0,40% | 11 Sep 2026 |
|
CVE-2026-80936
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: cancel mlo_pm_work on stop
mt7925 queues mlo_pm_work with a 5 second delay durin...
|
7.8 High | — | 0,17% | 11 Sep 2026 |
|
CVE-2026-80937
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
mt7915_mcu_get_eeprom() co...
|
8.8 High | — | 0,40% | 11 Sep 2026 |
|
CVE-2026-80926
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in oplock break notification
smb2_oplock_break_noti() reads opinfo->conn w...
|
9.8 Critical | — | 0,44% | 11 Sep 2026 |
|
CVE-2026-80928
In the Linux kernel, the following vulnerability has been resolved:
smack: fix cred UAF in smack_file_send_sigiotask()
When inspecting the credentials of another task,...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-80929
In the Linux kernel, the following vulnerability has been resolved:
sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
cad_pid is global, and kill...
|
7.8 High | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-80931
In the Linux kernel, the following vulnerability has been resolved:
w1: ds28e17: reject an oversize length on an I2C block read
w1_f19_i2c_master_transfer() is the mast...
|
7.8 High | — | 0,13% | 11 Sep 2026 |
|
CVE-2026-78546
Out-of-bounds read vulnerability in Citirx Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LT...
|
4.8 Medium | — | 0,14% | 11 Sep 2026 |
|
CVE-2026-78547
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), b...
|
4.4 Medium | — | 0,15% | 11 Sep 2026 |
|
CVE-2026-79035
A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to execute arbitrary Javascript...
|
6.1 Medium | — | 0,26% | 11 Sep 2026 |
|
CVE-2026-77490
microsoft edge chromium
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin...
|
6.1 Medium | — | 0,41% | 11 Sep 2026 |
|
CVE-2026-68526
concretecms concrete cms
Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller (concrete/controllers/dialog/event/duplicate.php) submit()...
|
4.3 Medium | — | 0,11% | 11 Sep 2026 |
|
CVE-2026-54135
AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a vulnerability in the custom HTTP server implement...
|
7.5 High | — | 0,76% | 11 Sep 2026 |
|
CVE-2026-53952
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSi...
|
9.8 Critical | — | 0,55% | 11 Sep 2026 |
|
CVE-2026-49462
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. In vers...
|
5.3 Medium | — | 0,40% | 11 Sep 2026 |
|
CVE-2026-49463
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The `nl...
|
6.5 Medium | — | 0,34% | 11 Sep 2026 |
|
CVE-2026-52630
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the update action in UserAction.cl...
|
9.8 Critical | — | 0,66% | 11 Sep 2026 |
|
CVE-2026-89329
A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then c...
|
6.2 Medium | — | 0,16% | 11 Sep 2026 |
|
CVE-2026-79393
A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v22...
|
7.5 High | — | 0,74% | 11 Sep 2026 |
|
CVE-2026-79394
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earli...
|
7.5 High | — | 0,60% | 11 Sep 2026 |
|
CVE-2026-79395
An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT...
|
9.8 Critical | — | 0,77% | 11 Sep 2026 |
|
CVE-2026-79396
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext w...
|
9.8 Critical | — | 0,58% | 11 Sep 2026 |
|
CVE-2026-81910
concretecms concrete cms
Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated Style Values. Values submitted through the customi...
|
6.5 Medium | — | 0,42% | 11 Sep 2026 |
|
CVE-2026-79362
Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6.2.6. An authenticated low-privileged user can inj...
|
8.8 High | — | 0,63% | 11 Sep 2026 |