Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-74761
apache activemq, apache activemq all +1 lainnya
Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All on all platforms.
An authenticated client can spoof clien...
|
7.5 High | — | 0,62% | 9 Sep 2026 |
|
CVE-2026-87827
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unau...
|
10.0 Critical | — | 1,1% | 9 Sep 2026 |
|
CVE-2026-85978
An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentica...
|
9.8 Critical | — | 1,4% | 9 Sep 2026 |
|
CVE-2026-79635
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability...
|
7.3 High | — | 0,31% | 9 Sep 2026 |
|
CVE-2026-79641
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
7.5 High | — | 1,1% | 9 Sep 2026 |
|
CVE-2026-79727
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to...
|
3.3 Low | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-80174
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Session Expiration vulnerability....
|
5.3 Medium | — | 0,27% | 9 Sep 2026 |
|
CVE-2026-80239
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Exposure of Sensitive System Information Due to...
|
2.4 Low | — | 0,20% | 9 Sep 2026 |
|
CVE-2026-73334
apache parquet
Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18.
This package enables users to encrypt Parquet fil...
|
8.1 High | — | 0,36% | 9 Sep 2026 |
|
CVE-2026-65181
apache impala
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitr...
|
8.1 High | — | 0,54% | 9 Sep 2026 |
|
CVE-2026-57866
apache impala
Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the ai_generate_text() function can exfiltr...
|
8.8 High | — | 0,58% | 9 Sep 2026 |
|
CVE-2026-54048
apache impala
Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a G...
|
5.3 Medium | — | 0,54% | 9 Sep 2026 |
|
CVE-2026-56207
apache impala
Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user....
|
9.8 Critical | — | 0,46% | 9 Sep 2026 |
|
CVE-2026-41869
apache nutch
Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API).
This issue affects Apache Nutch: from 1....
|
9.1 Critical | — | 0,72% | 9 Sep 2026 |
|
CVE-2026-41870
apache nutch
Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Inp...
|
8.8 High | — | 0,66% | 9 Sep 2026 |
|
CVE-2026-41871
apache nutch
Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API).
This...
|
9.8 Critical | — | 0,75% | 9 Sep 2026 |
|
CVE-2026-87794
bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP...
|
8.4 High | — | 0,28% | 9 Sep 2026 |
|
CVE-2026-87795
zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can su...
|
8.2 High | — | 0,63% | 9 Sep 2026 |
|
CVE-2026-86777
AlchemyCMS versions before 7.4.16 and 8.x before 8.3.6 fail to authorize access to the GET /api/nodes endpoint, allowing unauthenticated attackers to retrieve all navigat...
|
5.3 Medium | — | 0,56% | 9 Sep 2026 |
|
CVE-2026-86547
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can craft malic...
|
6.2 Medium | — | 0,18% | 9 Sep 2026 |
|
CVE-2026-86776
KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KD...
|
3.3 Low | — | 0,17% | 9 Sep 2026 |
|
CVE-2026-78377
URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Li...
|
6.1 Medium | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-19733
Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information...
|
5.3 Medium | — | 0,19% | 9 Sep 2026 |
|
CVE-2026-11838
Missing authentication for critical function vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library R...
|
4.3 Medium | — | 0,19% | 9 Sep 2026 |
|
CVE-2025-3271
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS
|
4.8 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-80175
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externa...
|
3.3 Low | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-80099
Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authen...
|
8.8 High | — | 2,9% | 9 Sep 2026 |
|
CVE-2026-80122
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.3 High | — | 0,22% | 9 Sep 2026 |
|
CVE-2026-87766
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing att...
|
8.8 High | — | 0,17% | 9 Sep 2026 |
|
CVE-2026-79640
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
5.4 Medium | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-79696
A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSS), Cloud Run, and GKE environm...
|
10.0 Critical | — | 0,74% | 9 Sep 2026 |
|
CVE-2026-79967
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
5.6 Medium | — | 0,15% | 9 Sep 2026 |
|
CVE-2026-79973
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Unsynchronized Access to Shared Data in a Multi...
|
6.3 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-79974
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low pr...
|
6.4 Medium | — | 0,30% | 9 Sep 2026 |
|
CVE-2026-78491
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
8.2 High | — | 0,27% | 9 Sep 2026 |
|
CVE-2026-78494
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.4 High | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-16272
Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted I...
|
9.1 Critical | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-12858
Improper Privilege Management vulnerability in ESET AV Remover (standalone) allows Privilege Escalation via especially crafted RPC.
|
8.5 High | — | 0,10% | 9 Sep 2026 |
|
CVE-2026-14359
The YITH WooCommerce Waitlist Premium plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.35.0. This is due to the add_user_in_...
|
8.8 High | — | 0,24% | 9 Sep 2026 |
|
CVE-2026-14989
The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpl_user_preference' parameter in all v...
|
7.2 High | — | 0,28% | 9 Sep 2026 |
|
CVE-2025-46808
An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive information into the manager container’s log
This issu...
|
6.8 Medium | — | 0,20% | 9 Sep 2026 |
|
CVE-2026-79636
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mi...
|
7.0 High | — | 0,21% | 9 Sep 2026 |
|
CVE-2026-80055
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
4.4 Medium | — | 0,34% | 9 Sep 2026 |
|
CVE-2026-80123
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability...
|
7.5 High | — | 0,34% | 9 Sep 2026 |
|
CVE-2026-80124
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log Fil...
|
5.5 Medium | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-80177
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
6.5 Medium | — | 0,37% | 9 Sep 2026 |
|
CVE-2026-75927
The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all ver...
|
7.2 High | — | 0,64% | 9 Sep 2026 |
|
CVE-2026-19729
A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a pr...
|
4.9 Medium | — | 0,48% | 9 Sep 2026 |
|
CVE-2026-19778
The WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin for WordPress is vulnerable to time-based SQL Injection via the 'feed' par...
|
6.5 Medium | — | 0,26% | 9 Sep 2026 |
|
CVE-2026-17149
The Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via '...
|
6.4 Medium | — | 0,20% | 9 Sep 2026 |