Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-78571
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval() call on attacker-controlled input.
|
8.8 High | — | 0,81% | 10 Sep 2026 |
|
CVE-2026-78573
ibm contextforge
IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker to gain administrative access due to the use of default credentials.
|
9.8 Critical | — | 0,58% | 10 Sep 2026 |
|
CVE-2026-75624
ibm app connect enterprise
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.27 could allow a remote authenticated attacker to bypass security restrictions due to i...
|
8.8 High | — | 0,50% | 10 Sep 2026 |
|
CVE-2026-75777
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the...
|
8.8 High | — | 0,15% | 10 Sep 2026 |
|
CVE-2026-76059
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-bo...
|
8.8 High | — | 0,68% | 10 Sep 2026 |
|
CVE-2026-71645
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration...
|
7.5 High | — | 0,61% | 10 Sep 2026 |
|
CVE-2026-71647
An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallba...
|
7.5 High | — | 0,61% | 10 Sep 2026 |
|
CVE-2026-71640
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired t...
|
9.1 Critical | — | 0,63% | 10 Sep 2026 |
|
CVE-2026-71642
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGORepl...
|
4.0 Medium | — | 0,18% | 10 Sep 2026 |
|
CVE-2026-71643
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGORepl...
|
7.5 High | — | 0,61% | 10 Sep 2026 |
|
CVE-2026-54054
Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, `POST /api/files/url`, is vul...
|
6.5 Medium | — | 0,35% | 10 Sep 2026 |
|
CVE-2026-45770
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5...
|
7.5 High | — | 0,48% | 10 Sep 2026 |
|
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, `SmartObject.save()` writes an embedded smart object to a path taken ve...
|
4.6 Medium | — | 0,19% | 10 Sep 2026 |
|
CVE-2026-49837
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue w...
|
5.9 Medium | — | 0,33% | 10 Sep 2026 |
|
CVE-2026-49838
GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. Prior to version 4.7.0, GoBGP accepts a zero-length AS_PATH during UP...
|
5.9 Medium | — | 0,41% | 10 Sep 2026 |
|
CVE-2026-45762
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP de...
|
7.5 High | — | 0,61% | 10 Sep 2026 |
|
CVE-2026-45764
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol chang...
|
9.1 Critical | — | 0,63% | 10 Sep 2026 |
|
CVE-2026-45765
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly...
|
7.5 High | — | 0,62% | 10 Sep 2026 |
|
CVE-2026-45766
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS pars...
|
7.5 High | — | 0,62% | 10 Sep 2026 |
|
CVE-2026-45767
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule...
|
4.4 Medium | — | 0,40% | 10 Sep 2026 |
|
CVE-2026-45768
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5...
|
7.5 High | — | 0,70% | 10 Sep 2026 |
|
CVE-2026-45769
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser stat...
|
7.5 High | — | 1,8% | 10 Sep 2026 |
|
CVE-2026-19646
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 could allow a remote attacker to redirect users to an arbitrary domain...
|
9.1 Critical | — | 0,38% | 10 Sep 2026 |
|
CVE-2026-36392
FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject arbitrary JavaScript into an item's title, which...
|
5.4 Medium | — | 0,23% | 10 Sep 2026 |
|
CVE-2026-2310
IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attack...
|
7.8 High | — | 0,19% | 10 Sep 2026 |
|
CVE-2025-57231
Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url.
|
7.5 High | — | 1,8% | 10 Sep 2026 |
|
CVE-2026-9667
ibm websphere application server
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server...
|
5.3 Medium | — | 0,43% | 10 Sep 2026 |
|
CVE-2026-9176
ibm websphere application server
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerabilit...
|
7.1 High | — | 0,16% | 10 Sep 2026 |
|
CVE-2026-9225
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an authenticated attacker to access sensitive files belonging to other users due to improper access control in...
|
6.5 Medium | — | 0,35% | 10 Sep 2026 |
|
CVE-2026-9327
ibm websphere application server
IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could resu...
|
8.1 High | — | 0,37% | 10 Sep 2026 |
|
CVE-2026-89089
A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated use...
|
6.5 Medium | — | 0,37% | 10 Sep 2026 |
|
CVE-2026-89094
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.
|
9.9 Critical | — | 0,85% | 10 Sep 2026 |
|
CVE-2026-85025
langflow
IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated attacker to execute arbitrary code and access or modify chat sessions through publicly share...
|
9.8 Critical | — | 0,61% | 10 Sep 2026 |
|
CVE-2026-79592
An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets.
|
7.5 High | — | 0,43% | 10 Sep 2026 |
|
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS() function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
|
7.8 High | — | 0,17% | 10 Sep 2026 |
|
CVE-2026-76653
A missing
authentication vulnerability in the VPN configuration management has been
identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access contr...
|
5.3 Medium | — | 0,47% | 10 Sep 2026 |
|
CVE-2026-76652
An
authenticated directory traversal vulnerability in file upload functionality has
been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to insufficient va...
|
4.8 Medium | — | 0,73% | 10 Sep 2026 |
|
CVE-2026-75940
A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-...
|
9.1 Critical | — | 0,40% | 10 Sep 2026 |
|
CVE-2026-63427
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated...
|
7.8 High | — | 0,19% | 10 Sep 2026 |
|
CVE-2026-45751
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspe...
|
7.5 High | — | 0,32% | 10 Sep 2026 |
|
CVE-2026-45752
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5...
|
5.9 Medium | — | 0,52% | 10 Sep 2026 |
|
CVE-2026-45759
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could r...
|
7.5 High | — | 0,84% | 10 Sep 2026 |
|
CVE-2026-45761
oisf suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule u...
|
3.3 Low | — | 0,18% | 10 Sep 2026 |
|
CVE-2026-3096
The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened pag...
|
4.7 Medium | — | 0,29% | 10 Sep 2026 |
|
CVE-2026-19596
An XML External Entity (XXE) vulnerability exists in the XML collector of multiple versions of OpenNMS Meridian and Horizon. When OpenNMS collects XML from a source whose...
|
5.9 Medium | — | 0,21% | 10 Sep 2026 |
|
CVE-2026-18994
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could al...
|
7.1 High | — | 0,10% | 10 Sep 2026 |
|
CVE-2026-19136
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating...
|
7.8 High | — | 0,87% | 10 Sep 2026 |
|
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.
|
7.8 High | — | 0,10% | 10 Sep 2026 |
|
CVE-2022-26962
Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username,...
|
5.4 Medium | — | 0,17% | 10 Sep 2026 |
|
CVE-2026-89086
In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS #1 decoding succeeds, and proceed to declare the signature...
|
9.1 Critical | — | 0,28% | 10 Sep 2026 |