Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-80056
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log Fil...
|
5.5 Medium | — | 0,14% | 7 Sep 2026 |
|
CVE-2026-80057
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerabili...
|
5.5 Medium | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-79644
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.4 High | — | 0,24% | 7 Sep 2026 |
|
CVE-2026-78480
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vul...
|
7.5 High | — | 0,55% | 7 Sep 2026 |
|
CVE-2026-78488
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
6.5 Medium | — | 4,8% | 7 Sep 2026 |
|
CVE-2026-19843
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell...
|
8.4 High | — | 0,48% | 7 Sep 2026 |
|
CVE-2026-18922
A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyrus SASL auxiliary property from a prior failed bind attempt c...
|
9.8 Critical | — | 0,56% | 7 Sep 2026 |
|
CVE-2026-18453
A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attacker to cras...
|
7.5 High | — | 0,85% | 7 Sep 2026 |
|
CVE-2026-6377
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) a...
|
7.5 High | — | 1,8% | 7 Sep 2026 |
|
CVE-2026-18355
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), the wrapped-record length read from the wire...
|
7.5 High | — | 0,84% | 7 Sep 2026 |
|
CVE-2026-86308
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This issue affects some unknown processin...
|
5.3 Medium | — | 0,54% | 7 Sep 2026 |
|
CVE-2026-86309
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argum...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86310
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipul...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86452
misp-project misp
Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bounds or rate limiting.
The user...
|
7.5 High | — | 0,54% | 7 Sep 2026 |
|
CVE-2026-86307
A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnerability affects...
|
4.3 Medium | — | 0,23% | 7 Sep 2026 |
|
CVE-2026-80164
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
9.1 Critical | — | 0,25% | 7 Sep 2026 |
|
CVE-2026-80170
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An...
|
6.5 Medium | — | 0,35% | 7 Sep 2026 |
|
CVE-2026-79734
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.5 High | — | 0,22% | 7 Sep 2026 |
|
CVE-2026-80128
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low pr...
|
6.5 Medium | — | 0,32% | 7 Sep 2026 |
|
CVE-2026-80129
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restrict...
|
9.8 Critical | — | 0,68% | 7 Sep 2026 |
|
CVE-2026-80130
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low pri...
|
8.8 High | — | 0,63% | 7 Sep 2026 |
|
CVE-2026-80131
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restrict...
|
9.8 Critical | — | 0,78% | 7 Sep 2026 |
|
CVE-2026-78487
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerabili...
|
5.5 Medium | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-76560
A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribut...
|
7.5 High | — | 0,56% | 7 Sep 2026 |
|
CVE-2026-14444
The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization ch...
|
7.5 High | — | 0,21% | 7 Sep 2026 |
|
CVE-2026-12757
The The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to arbitrary shortcode...
|
6.5 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-8279
The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' function in th...
|
5.3 Medium | — | 0,40% | 7 Sep 2026 |
|
CVE-2026-86435
commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. Attackers...
|
7.5 High | — | 0,49% | 7 Sep 2026 |
|
CVE-2026-86440
misp-project misp
Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget.
The widget's URL is stored configuration controlled by...
|
5.4 Medium | — | 0,24% | 7 Sep 2026 |
|
CVE-2026-86441
misp-project misp
Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information.
Several organisation-related widgets...
|
4.3 Medium | — | 0,28% | 7 Sep 2026 |
|
CVE-2026-86451
misp-project misp
Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data() without first checking wheth...
|
4.3 Medium | — | 0,27% | 7 Sep 2026 |
|
CVE-2026-86428
thephpleague commonmark
commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers c...
|
7.5 High | — | 0,49% | 7 Sep 2026 |
|
CVE-2026-86429
thephpleague commonmark
The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesEx...
|
7.5 High | — | 0,52% | 7 Sep 2026 |
|
CVE-2026-86430
thephpleague commonmark
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delim...
|
7.5 High | — | 0,49% | 7 Sep 2026 |
|
CVE-2026-86431
thephpleague commonmark
league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. Prefixing an attribute...
|
7.2 High | — | 0,39% | 7 Sep 2026 |
|
CVE-2026-86432
commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. Attacker...
|
5.3 Medium | — | 0,42% | 7 Sep 2026 |
|
CVE-2026-86433
commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() perfo...
|
7.5 High | — | 0,51% | 7 Sep 2026 |
|
CVE-2026-86434
league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in UniqueSlugNormalizer::normalize(), which restarts its nume...
|
7.5 High | — | 0,51% | 7 Sep 2026 |
|
CVE-2026-86422
imagemagick
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restric...
|
3.3 Low | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-86423
imagemagick
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList met...
|
5.5 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-86424
imagemagick
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy wri...
|
2.5 Low | — | 0,14% | 7 Sep 2026 |
|
CVE-2026-86425
imagemagick
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted...
|
5.5 Medium | — | 0,15% | 7 Sep 2026 |
|
CVE-2026-86426
librenms
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending nume...
|
9.8 Critical | — | 3,9% | 7 Sep 2026 |
|
CVE-2026-86427
librenms
LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments...
|
8.8 High | — | 0,61% | 7 Sep 2026 |
|
CVE-2026-86408
misp-project misp
Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view().
The vulnerable handler que...
|
6.5 Medium | — | 0,34% | 7 Sep 2026 |
|
CVE-2026-86416
ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perfo...
|
5.4 Medium | — | 0,45% | 7 Sep 2026 |
|
CVE-2026-86417
misp-project misp
Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates().
The query always fetched User.email, while redactio...
|
4.3 Medium | — | 0,27% | 7 Sep 2026 |
|
CVE-2026-86418
misp-project misp
Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal...
|
4.3 Medium | — | 0,27% | 7 Sep 2026 |
|
CVE-2026-86419
misp-project misp
Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality.
In feed process...
|
9.1 Critical | — | 0,42% | 7 Sep 2026 |
|
CVE-2026-86420
imagemagick
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures ca...
|
7.5 High | — | 0,32% | 7 Sep 2026 |