Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-78132
strongswan
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
|
7.5 High | — | 0,35% | 11 Sep 2026 |
|
CVE-2026-78133
strongswan
libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling.
|
7.5 High | — | 0,47% | 11 Sep 2026 |
|
CVE-2026-78134
strongswan
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.
|
7.1 High | — | 0,45% | 11 Sep 2026 |
|
CVE-2026-78123
strongswan
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
|
5.9 Medium | — | 0,46% | 11 Sep 2026 |
|
CVE-2026-78124
strongswan
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
|
3.7 Low | — | 0,25% | 11 Sep 2026 |
|
CVE-2026-78126
strongswan
strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.
|
5.9 Medium | — | 0,47% | 11 Sep 2026 |
|
CVE-2026-84941
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges...
|
6.9 Medium | — | 0,47% | 11 Sep 2026 |
|
CVE-2026-81905
Concrete CMS below 9.5.3 stores user validation hashes for multiple purposes (email/registration validation, password reset, and persistent login) in a single table with...
|
6.3 Medium | — | 0,36% | 11 Sep 2026 |
|
CVE-2026-81906
Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated...
|
6.3 Medium | — | 0,62% | 11 Sep 2026 |
|
CVE-2026-77807
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions u...
|
7.5 High | — | 0,93% | 11 Sep 2026 |
|
CVE-2026-18121
Concrete CMS 9.5.2 and below is vulnerable to an authorization bypass (IDOR) because the frontend calendar lightbox endpoint (/ccm/calendar/view_event/{bID}/{occurrence_i...
|
6.3 Medium | — | 0,29% | 11 Sep 2026 |
|
CVE-2026-17176
An OS
command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an
adjacent network attacker to execute arbitrary commands with root priv...
|
7.7 High | — | 5,0% | 11 Sep 2026 |
|
CVE-2026-16174
Netskope was notified about a potential gap in Netskope Endpoint DLP (EPDLP) running on Windows systems. Successful exploitation of the gap could potentially allow a priv...
|
8.7 High | — | 0,13% | 10 Sep 2026 |
|
CVE-2026-16172
Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP (EPDLP) service of the Netskope Client. A local standard user could potentially send a spec...
|
6.0 Medium | — | 0,11% | 10 Sep 2026 |
|
CVE-2026-82100
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
|
6.5 Medium | — | 0,62% | 10 Sep 2026 |
|
CVE-2026-82107
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper a...
|
9.6 Critical | — | 0,54% | 10 Sep 2026 |
|
CVE-2026-84889
langflow
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted direc...
|
8.8 High | — | 0,85% | 10 Sep 2026 |
|
CVE-2026-86087
ibm db2
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.
|
4.3 Medium | — | 0,34% | 10 Sep 2026 |
|
CVE-2026-86093
ibm db2
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary co...
|
7.5 High | — | 0,45% | 10 Sep 2026 |
|
CVE-2026-87958
ibm db2
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileg...
|
8.1 High | — | 0,38% | 10 Sep 2026 |
|
CVE-2026-81940
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow d...
|
8.8 High | — | 0,81% | 10 Sep 2026 |
|
CVE-2026-81941
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary operating system commands on the server at the privilege lev...
|
8.8 High | — | 0,63% | 10 Sep 2026 |
|
CVE-2026-82092
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
|
6.5 Medium | — | 0,77% | 10 Sep 2026 |
|
CVE-2026-82095
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used...
|
8.8 High | — | 0,81% | 10 Sep 2026 |
|
CVE-2026-82097
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to a Server-Side Request Forgery (SSRF) vulnerabilit...
|
8.8 High | — | 0,64% | 10 Sep 2026 |
|
CVE-2026-82098
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements u...
|
8.8 High | — | 0,79% | 10 Sep 2026 |
|
CVE-2026-82099
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used...
|
8.8 High | — | 0,81% | 10 Sep 2026 |
|
CVE-2026-81213
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive information from internal network resources due to improper validation of user-sup...
|
8.6 High | — | 0,49% | 10 Sep 2026 |
|
CVE-2026-81265
langflow
IBM Langflow OSS 1.0.0 through 1.11.5.
|
7.5 High | — | 0,39% | 10 Sep 2026 |
|
CVE-2026-81268
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration...
|
8.1 High | — | 0,43% | 10 Sep 2026 |
|
CVE-2026-81540
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to overwrite ruleset files belonging to other tenants due to a path traversal vuln...
|
8.5 High | — | 0,55% | 10 Sep 2026 |
|
CVE-2026-81550
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used...
|
8.8 High | — | 0,81% | 10 Sep 2026 |
|
CVE-2026-81551
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path traversal...
|
8.1 High | — | 0,64% | 10 Sep 2026 |
|
CVE-2026-81554
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability.
|
6.5 Medium | — | 0,77% | 10 Sep 2026 |
|
CVE-2026-81204
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction.
|
9.8 Critical | — | 0,86% | 10 Sep 2026 |
|
CVE-2026-81207
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fet...
|
8.5 High | — | 0,29% | 10 Sep 2026 |
|
CVE-2026-81210
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file wi...
|
7.7 High | — | 0,34% | 10 Sep 2026 |
|
CVE-2026-81211
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in s...
|
8.8 High | — | 0,56% | 10 Sep 2026 |
|
CVE-2026-80380
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to perform unauthorized actions due to cross-site request forgery.
|
7.1 High | — | 0,20% | 10 Sep 2026 |
|
CVE-2026-80424
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction.
|
9.1 Critical | — | 0,51% | 10 Sep 2026 |
|
CVE-2026-80434
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure dire...
|
5.0 Medium | — | 0,31% | 10 Sep 2026 |
|
CVE-2026-80436
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges du...
|
8.5 High | — | 0,38% | 10 Sep 2026 |
|
CVE-2026-80378
ibm datastage on cloud pak for data
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization.
|
6.5 Medium | — | 0,38% | 10 Sep 2026 |
|
CVE-2026-79590
A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers t...
|
6.5 Medium | — | 0,37% | 10 Sep 2026 |
|
CVE-2026-79723
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-controlled API endpoi...
|
5.0 Medium | — | 0,35% | 10 Sep 2026 |
|
CVE-2026-79724
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS comm...
|
9.8 Critical | — | 0,67% | 10 Sep 2026 |
|
CVE-2026-79725
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read arbitrary files due to improper access control.
|
6.5 Medium | — | 0,42% | 10 Sep 2026 |
|
CVE-2026-79742
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist.
|
8.8 High | — | 0,81% | 10 Sep 2026 |
|
CVE-2026-78575
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of command-line arguments in th...
|
8.8 High | — | 0,79% | 10 Sep 2026 |
|
CVE-2026-78569
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the security scanner.
|
8.8 High | — | 0,65% | 10 Sep 2026 |