Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-78221
An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or...
|
5.9 Medium | — | 0,12% | 7 Sep 2026 |
|
CVE-2026-78254
apache ant
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated...
|
7.4 High | — | 0,52% | 7 Sep 2026 |
|
CVE-2026-14296
When using the Direct XIP
update strategy, the main application image starts other cores (i.e. radio
core), based on the currently active slot without additional verifica...
|
7.5 High | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-79698
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-...
|
9.9 Critical | — | 3,2% | 7 Sep 2026 |
|
CVE-2026-86277
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.ph...
|
7.3 High | — | 0,52% | 7 Sep 2026 |
|
CVE-2026-86278
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_...
|
4.3 Medium | — | 0,47% | 7 Sep 2026 |
|
CVE-2026-86279
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file au...
|
6.3 Medium | — | 0,40% | 7 Sep 2026 |
|
CVE-2026-79697
A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-...
|
9.9 Critical | — | 4,9% | 7 Sep 2026 |
|
CVE-2026-86276
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Exec...
|
7.3 High | — | 0,50% | 7 Sep 2026 |
|
CVE-2026-86273
A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jf...
|
7.3 High | — | 0,50% | 7 Sep 2026 |
|
CVE-2026-86274
A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. This affects the function ExAutenticacaoController.autenticar of the fil...
|
5.3 Medium | — | 0,74% | 7 Sep 2026 |
|
CVE-2026-86275
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file...
|
5.3 Medium | — | 0,48% | 7 Sep 2026 |
|
CVE-2026-86270
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php. Such mani...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86271
A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. P...
|
4.7 Medium | — | 0,40% | 7 Sep 2026 |
|
CVE-2026-86272
A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. This impacts an unknown function of the file /Report/Uplo...
|
7.3 High | — | 0,51% | 7 Sep 2026 |
|
CVE-2026-86267
A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /socie...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86268
A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulation of the argument em...
|
7.3 High | — | 0,43% | 7 Sep 2026 |
|
CVE-2026-86269
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipulation of t...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86315
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt na...
|
6.2 Medium | — | 0,17% | 7 Sep 2026 |
|
CVE-2026-86265
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_transac.ph...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86263
A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file...
|
7.3 High | — | 0,57% | 7 Sep 2026 |
|
CVE-2026-86264
A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/we...
|
4.3 Medium | — | 0,45% | 7 Sep 2026 |
|
CVE-2026-86313
Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers.
This issue affects Walrus: af80e665ea49d9003695a66502f841ed1d8397e7.
|
7.8 High | — | 0,17% | 7 Sep 2026 |
|
CVE-2026-86314
Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-boun...
|
6.2 Medium | — | 0,18% | 7 Sep 2026 |
|
CVE-2026-86261
A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssm_pro/src/...
|
7.3 High | — | 0,57% | 7 Sep 2026 |
|
CVE-2026-86262
A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects the function updateOrderSta1/updateOrderdis...
|
7.3 High | — | 0,57% | 7 Sep 2026 |
|
CVE-2026-86260
A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the function modifyPassWord of the file...
|
6.5 Medium | — | 0,60% | 7 Sep 2026 |
|
CVE-2026-86241
A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the compone...
|
4.3 Medium | — | 0,49% | 7 Sep 2026 |
|
CVE-2026-86244
A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. Affected is the function register/login of the file application/index/controller/User.p...
|
4.3 Medium | — | 0,47% | 7 Sep 2026 |
|
CVE-2026-86245
A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_transac.php...
|
6.3 Medium | — | 0,33% | 7 Sep 2026 |
|
CVE-2026-86239
A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction....
|
5.3 Medium | — | 0,53% | 7 Sep 2026 |
|
CVE-2026-86240
A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component...
|
4.7 Medium | — | 0,40% | 7 Sep 2026 |
|
CVE-2026-20513
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has alread...
|
4.4 Medium | — | 0,18% | 7 Sep 2026 |
|
CVE-2026-20514
In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has alrea...
|
4.4 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20515
In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is...
|
5.5 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20516
In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local denial of service with User execution privileges needed...
|
5.5 Medium | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-20517
In geniezone, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine...
|
6.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20518
In geniezone, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already o...
|
4.4 Medium | — | 0,12% | 7 Sep 2026 |
|
CVE-2026-20503
mediatek mt2716 firmware, mediatek mt2735 firmware +55 lainnya
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station contr...
|
5.3 Medium | — | 0,19% | 7 Sep 2026 |
|
CVE-2026-20504
mediatek mt2735 firmware, mediatek mt6833 firmware +17 lainnya
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station contr...
|
5.3 Medium | — | 0,19% | 7 Sep 2026 |
|
CVE-2026-20506
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine...
|
6.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20507
In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtaine...
|
6.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20508
In Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtaine...
|
6.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20509
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obt...
|
6.7 Medium | — | 0,12% | 7 Sep 2026 |
|
CVE-2026-20510
In camera middleware, there is a possible escalation of privilege due to double free. This could lead to local escalation of privilege if a malicious actor has already ob...
|
6.7 Medium | — | 0,12% | 7 Sep 2026 |
|
CVE-2026-20511
In SurfaceFlinger, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained...
|
6.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20512
In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has alre...
|
6.7 Medium | — | 0,11% | 7 Sep 2026 |
|
CVE-2026-20500
mediatek mt2716 firmware, mediatek mt6835 firmware +20 lainnya
In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User intera...
|
5.5 Medium | — | 0,09% | 7 Sep 2026 |
|
CVE-2026-20501
mediatek mt2718 firmware, mediatek mt6580 firmware +51 lainnya
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges n...
|
8.4 High | — | 0,13% | 7 Sep 2026 |
|
CVE-2026-20502
mediatek mt2718 firmware, mediatek mt6580 firmware +51 lainnya
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges n...
|
8.4 High | — | 0,13% | 7 Sep 2026 |