Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 20 kali dilihat
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-18076
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak.
|
6.5 Medium | — | 0,29% | 4 Sep 2026 |
|
CVE-2026-18073
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements.
|
4.4 Medium | — | 0,11% | 4 Sep 2026 |
|
CVE-2026-17631
langflow
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to a server-side request forgery (SSRF) vulnerabilit...
|
6.5 Medium | — | 0,24% | 4 Sep 2026 |
|
CVE-2026-17627
langflow
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information and inject messages into workflow history due to imprope...
|
7.1 High | — | 0,20% | 4 Sep 2026 |
|
CVE-2026-17622
langflow
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted...
|
6.5 Medium | — | 0,49% | 4 Sep 2026 |
|
CVE-2026-17621
langflow
IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containi...
|
5.4 Medium | — | 0,29% | 4 Sep 2026 |
|
CVE-2026-17499
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
|
7.8 High | — | 0,12% | 4 Sep 2026 |
|
CVE-2026-17483
ibm db2 mirror for i
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to delete historical flight-recorder archives due to improper access control in an SQL procedure...
|
3.3 Low | — | 0,15% | 4 Sep 2026 |
|
CVE-2026-17470
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
|
7.5 High | — | 0,39% | 4 Sep 2026 |
|
CVE-2026-17469
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser.
|
5.5 Medium | — | 0,21% | 4 Sep 2026 |
|
CVE-2026-17444
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote auth...
|
6.5 Medium | — | 0,29% | 4 Sep 2026 |
|
CVE-2026-17443
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote auth...
|
6.5 Medium | — | 0,29% | 4 Sep 2026 |
|
CVE-2026-17442
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attac...
|
5.5 Medium | — | 0,09% | 4 Sep 2026 |
|
CVE-2026-17440
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attac...
|
5.5 Medium | — | 0,10% | 4 Sep 2026 |
|
CVE-2026-17274
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to predictable server seeds.
|
5.4 Medium | — | 0,24% | 4 Sep 2026 |
|
CVE-2026-17273
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference.
|
6.5 Medium | — | 0,35% | 4 Sep 2026 |
|
CVE-2026-17270
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to a stack-based buffer overflow.
|
5.5 Medium | — | 0,21% | 4 Sep 2026 |
|
CVE-2026-17259
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.
|
6.5 Medium | — | 0,36% | 4 Sep 2026 |
|
CVE-2026-17255
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements.
|
7.5 High | — | 0,41% | 4 Sep 2026 |
|
CVE-2026-17207
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and compromise integrity due to a buffer overflow.
|
9.1 Critical | — | 0,34% | 4 Sep 2026 |
|
CVE-2026-17057
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and affect data integrity due to missing authentication for critical functions.
|
9.1 Critical | — | 0,38% | 4 Sep 2026 |
|
CVE-2026-16941
ibm i
IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization.
|
4.3 Medium | — | 0,23% | 4 Sep 2026 |
|
CVE-2026-16892
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching.
|
5.4 Medium | — | 0,25% | 4 Sep 2026 |
|
CVE-2026-16826
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
|
7.8 High | — | 0,13% | 4 Sep 2026 |
|
CVE-2026-16693
ibm i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate...
|
4.9 Medium | — | 0,13% | 4 Sep 2026 |
|
CVE-2026-16689
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attac...
|
5.5 Medium | — | 0,11% | 4 Sep 2026 |
|
CVE-2026-16660
ibm db2 mirror for i
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
|
5.3 Medium | — | 0,36% | 4 Sep 2026 |
|
CVE-2026-16180
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 Toolkit could allow an au...
|
5.7 Medium | — | 0,22% | 4 Sep 2026 |
|
CVE-2026-14470
langflow
IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request...
|
6.5 Medium | — | 0,34% | 4 Sep 2026 |
|
CVE-2026-14350
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special...
|
5.3 Medium | — | 0,23% | 4 Sep 2026 |
|
CVE-2026-13297
IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.
|
7.5 High | — | 0,25% | 4 Sep 2026 |
|
CVE-2026-85730
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is fol...
|
8.2 High | — | 0,52% | 4 Sep 2026 |
|
CVE-2026-82911
Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero Flow CRM before 5.15.11 allows an unauthenticated...
|
5.1 Medium | — | 0,23% | 4 Sep 2026 |
|
CVE-2026-79419
emxtecnologia gestao x business suite
A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validat...
|
8.7 High | — | 0,38% | 4 Sep 2026 |
|
CVE-2026-79418
emxtecnologia gestao x business suite
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controll...
|
8.7 High | — | 0,38% | 4 Sep 2026 |
|
CVE-2026-78970
JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can ac...
|
6.5 Medium | — | 0,38% | 4 Sep 2026 |
|
CVE-2026-78658
IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.25, and 7.3 through 7.3.2.20 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.15, 8.1 through 8.1.2.8, and 8.2 through 8...
|
6.5 Medium | — | 0,38% | 4 Sep 2026 |
|
CVE-2026-78543
ibm app connect enterprise, ibm integration bus for z/os
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a remote atta...
|
7.5 High | — | 0,55% | 4 Sep 2026 |
|
CVE-2026-77822
ibm contextforge
IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery via DNS rebinding.
|
9.6 Critical | — | 0,37% | 4 Sep 2026 |
|
CVE-2026-75431
PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary c...
|
9.1 Critical | — | 1,1% | 4 Sep 2026 |
|
CVE-2026-75429
PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer
|
9.8 Critical | — | 0,98% | 4 Sep 2026 |
|
CVE-2026-75171
An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.
|
9.8 Critical | — | 0,61% | 4 Sep 2026 |
|
CVE-2026-75170
Cross-site scripting (XSS) vulnerability in the /loginController/doLogin endpoint of the HubCore platform (version 14.1.1) allows a remote unauthenticated attacker to inj...
|
6.1 Medium | — | 0,34% | 4 Sep 2026 |
|
CVE-2026-75169
An arbitrary file upload vulnerability in /cgi-bin/ugwupload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with Admin role to...
|
8.8 High | — | 0,72% | 4 Sep 2026 |
|
CVE-2026-75168
An issue in the ugw-editfile method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged S...
|
6.3 Medium | — | 0,42% | 4 Sep 2026 |
|
CVE-2026-75167
A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated u...
|
4.3 Medium | — | 0,41% | 4 Sep 2026 |
|
CVE-2026-75166
Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows the low-privileged service user to execute /usr/bin/tcpdump as root without a...
|
8.8 High | — | 0,74% | 4 Sep 2026 |
|
CVE-2026-75165
An issue in /cgi-bin/wwwugw.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to invoke hidd...
|
6.5 Medium | — | 0,56% | 4 Sep 2026 |
|
CVE-2026-75164
An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privil...
|
6.5 Medium | — | 0,55% | 4 Sep 2026 |
|
CVE-2026-75163
An information disclosure vulnerability in the ugw-deviceinfo method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 returns detailed system ver...
|
6.5 Medium | — | 0,45% | 4 Sep 2026 |