Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-86505
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace
|
3.3 Low | — | 0,15% | 7 Sep 2026 |
|
CVE-2026-86506
In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data
|
5.9 Medium | — | 0,38% | 7 Sep 2026 |
|
CVE-2026-86497
In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate stored mailbox credentials
|
6.8 Medium | — | 0,51% | 7 Sep 2026 |
|
CVE-2026-86498
In JetBrains YouTrack before 2025.3.160480,
2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without update permission
|
7.7 High | — | 0,30% | 7 Sep 2026 |
|
CVE-2026-86499
In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission
|
4.3 Medium | — | 0,27% | 7 Sep 2026 |
|
CVE-2026-86500
In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin
|
5.5 Medium | — | 0,27% | 7 Sep 2026 |
|
CVE-2026-86501
In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log
|
2.8 Low | — | 0,39% | 7 Sep 2026 |
|
CVE-2026-86502
In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts
|
8.4 High | — | 0,21% | 7 Sep 2026 |
|
CVE-2026-86503
In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching
|
3.3 Low | — | 0,15% | 7 Sep 2026 |
|
CVE-2026-86504
In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execution
|
7.8 High | — | 0,19% | 7 Sep 2026 |
|
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches
|
6.5 Medium | — | 0,34% | 7 Sep 2026 |
|
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations
|
6.5 Medium | — | 0,34% | 7 Sep 2026 |
|
CVE-2026-86490
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint
|
6.5 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86491
In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads
|
3.5 Low | — | 0,24% | 7 Sep 2026 |
|
CVE-2026-86492
In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens
|
8.5 High | — | 0,90% | 7 Sep 2026 |
|
CVE-2026-86493
In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards
|
6.5 Medium | — | 0,30% | 7 Sep 2026 |
|
CVE-2026-86494
In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues
|
7.7 High | — | 0,30% | 7 Sep 2026 |
|
CVE-2026-86495
In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects
|
6.5 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86496
In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses
|
4.3 Medium | — | 0,28% | 7 Sep 2026 |
|
CVE-2026-86479
In JetBrains YouTrack before 2026.2.18788,
2026.1.14055,
2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR
|
8.1 High | — | 0,35% | 7 Sep 2026 |
|
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges
|
9.8 Critical | — | 0,50% | 7 Sep 2026 |
|
CVE-2026-86481
In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons
|
4.3 Medium | — | 0,27% | 7 Sep 2026 |
|
CVE-2026-86482
In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation
|
8.8 High | — | 0,42% | 7 Sep 2026 |
|
CVE-2026-86483
In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible
|
5.4 Medium | — | 0,64% | 7 Sep 2026 |
|
CVE-2026-86484
In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS
|
4.6 Medium | — | 0,64% | 7 Sep 2026 |
|
CVE-2026-86485
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks
|
3.3 Low | — | 0,16% | 7 Sep 2026 |
|
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank
|
3.7 Low | — | 0,26% | 7 Sep 2026 |
|
CVE-2026-86487
In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canvas content
|
3.1 Low | — | 0,20% | 7 Sep 2026 |
|
CVE-2026-86478
In JetBrains YouTrack before 2025.3.161254,
2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeover via a self-asserted email...
|
9.8 Critical | — | 0,61% | 7 Sep 2026 |
|
CVE-2026-79975
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
5.5 Medium | — | 0,09% | 7 Sep 2026 |
|
CVE-2026-80058
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulne...
|
5.5 Medium | — | 0,10% | 7 Sep 2026 |
|
CVE-2026-80125
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
5.9 Medium | — | 0,23% | 7 Sep 2026 |
|
CVE-2026-80126
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privilege...
|
6.5 Medium | — | 0,32% | 7 Sep 2026 |
|
CVE-2026-80166
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An...
|
7.8 High | — | 0,14% | 7 Sep 2026 |
|
CVE-2026-80167
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerabili...
|
5.5 Medium | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-80176
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage of a Password vulnerability. A...
|
4.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-79639
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.6 High | — | 0,16% | 7 Sep 2026 |
|
CVE-2026-86321
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL of the file src/main/java/com/github/fge/jac...
|
5.3 Medium | — | 0,66% | 7 Sep 2026 |
|
CVE-2026-86469
A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library u...
|
5.3 Medium | — | 0,14% | 7 Sep 2026 |
|
CVE-2026-79642
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
5.6 Medium | — | 0,18% | 7 Sep 2026 |
|
CVE-2026-79643
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect Operator vulnerability. An una...
|
7.3 High | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-79691
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.3 High | — | 0,19% | 7 Sep 2026 |
|
CVE-2026-79943
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mi...
|
4.8 Medium | — | 0,15% | 7 Sep 2026 |
|
CVE-2026-80054
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permission Assignment for Critical Re...
|
5.5 Medium | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-80127
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
7.2 High | — | 1,4% | 7 Sep 2026 |
|
CVE-2026-86318
A flaw has been found in java-json-tools json-patch up to 1.13. Affected is the function JsonMergePatch.fromJson of the file JsonMergePatchDeserializer.java. Executing a...
|
5.3 Medium | — | 0,76% | 7 Sep 2026 |
|
CVE-2026-86319
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/gith...
|
5.3 Medium | — | 0,70% | 7 Sep 2026 |
|
CVE-2026-86317
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the...
|
5.3 Medium | — | 0,70% | 7 Sep 2026 |
|
CVE-2026-7861
Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Code Injection.
This issue affects CSM...
|
9.8 Critical | — | 0,56% | 7 Sep 2026 |
|
CVE-2026-79645
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vul...
|
8.2 High | — | 0,41% | 7 Sep 2026 |