Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-82006
adobe photoshop
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...
|
7.8 High | — | 0,34% | 8 Sep 2026 |
|
CVE-2026-79905
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-78626
okta access gateway
The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorizati...
|
6.5 Medium | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-78627
okta hyperdrive
The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer l...
|
5.5 Medium | — | 0,14% | 8 Sep 2026 |
|
CVE-2026-78834
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled im...
|
8.8 High | — | 0,67% | 8 Sep 2026 |
|
CVE-2026-78623
okta access gateway
The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsaniti...
|
9.9 Critical | — | 0,45% | 8 Sep 2026 |
|
CVE-2026-78624
okta access gateway
The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintende...
|
4.9 Medium | — | 0,46% | 8 Sep 2026 |
|
CVE-2026-78625
okta access gateway
The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included...
|
6.7 Medium | — | 0,23% | 8 Sep 2026 |
|
CVE-2026-78552
okta access gateway
The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the ngin...
|
4.9 Medium | — | 0,27% | 8 Sep 2026 |
|
CVE-2026-78560
okta access gateway
The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic valida...
|
6.5 Medium | — | 0,20% | 8 Sep 2026 |
|
CVE-2026-78574
okta hyperdrive
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced pa...
|
6.3 Medium | — | 0,10% | 8 Sep 2026 |
|
CVE-2026-78579
okta access gateway
The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw...
|
6.5 Medium | — | 0,24% | 8 Sep 2026 |
|
CVE-2026-78620
okta access gateway
The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payl...
|
4.9 Medium | — | 0,34% | 8 Sep 2026 |
|
CVE-2026-78545
okta access gateway
The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated...
|
7.2 High | — | 0,38% | 8 Sep 2026 |
|
CVE-2026-78550
okta access gateway
The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the u...
|
7.2 High | — | 0,38% | 8 Sep 2026 |
|
CVE-2026-76002
adobe coldfusion
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page,...
|
6.1 Medium | — | 0,43% | 8 Sep 2026 |
|
CVE-2026-76190
adobe coldfusion
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code exec...
|
8.6 High | — | 0,83% | 8 Sep 2026 |
|
CVE-2026-76199
adobe photoshop
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An at...
|
8.6 High | — | 0,29% | 8 Sep 2026 |
|
CVE-2026-75991
adobe illustrator
Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could...
|
8.6 High | — | 0,30% | 8 Sep 2026 |
|
CVE-2026-75992
adobe illustrator
Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...
|
7.8 High | — | 0,26% | 8 Sep 2026 |
|
CVE-2026-75993
adobe coldfusion
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page,...
|
8.5 High | — | 0,45% | 8 Sep 2026 |
|
CVE-2026-75998
adobe coldfusion
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access s...
|
7.5 High | — | 0,82% | 8 Sep 2026 |
|
CVE-2026-75999
adobe coldfusion
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged at...
|
8.4 High | — | 0,47% | 8 Sep 2026 |
|
CVE-2026-76000
adobe coldfusion
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabilit...
|
6.5 Medium | — | 0,41% | 8 Sep 2026 |
|
CVE-2026-75990
adobe illustrator
Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could ex...
|
8.6 High | — | 0,28% | 8 Sep 2026 |
|
CVE-2026-75742
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75746
adobe coldfusion
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execut...
|
9.1 Critical | — | 0,99% | 8 Sep 2026 |
|
CVE-2026-75771
adobe photoshop
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...
|
7.8 High | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-75862
adobe photoshop
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...
|
7.8 High | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-75863
adobe photoshop
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploit...
|
7.8 High | — | 0,31% | 8 Sep 2026 |
|
CVE-2026-75734
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75735
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75736
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75737
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75738
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75739
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75740
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75741
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75722
adobe experience manager
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-75724
adobe experience manager
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-75725
adobe experience manager
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-75726
adobe experience manager
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverag...
|
3.5 Low | — | 0,54% | 8 Sep 2026 |
|
CVE-2026-75727
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75729
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75730
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75731
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75733
adobe experience manager
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | 0,39% | 8 Sep 2026 |
|
CVE-2026-75713
adobe experience manager
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-75714
adobe experience manager
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | 0,36% | 8 Sep 2026 |
|
CVE-2026-75715
adobe experience manager
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | 0,36% | 8 Sep 2026 |