Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-109761
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109756
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
8.8 High | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-109752
Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109743
Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
8.8 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-109751
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
4.3 Medium | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-109749
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109748
Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109739
Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
8.8 High | — | 0,16% | 13 Okt 2026 |
|
CVE-2026-109742
Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
4.3 Medium | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-109741
Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109738
Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109735
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109732
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-109729
Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbi...
|
5.4 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-109728
Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109727
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109726
Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109725
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153...
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109724
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109719
Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158...
|
4.2 Medium | — | 0,17% | 13 Okt 2026 |
|
CVE-2026-109718
Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109717
Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109713
Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109711
Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
5.4 Medium | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-109710
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109709
Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 15...
|
8.8 High | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-109704
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
8.8 High | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-109707
Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
|
9.6 Critical | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-109706
Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 1...
|
5.4 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-109705
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefo...
|
9.6 Critical | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-109407
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Co...
|
3.1 Low | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109406
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the c...
|
5.4 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109405
A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/net...
|
7.3 High | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-109404
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the...
|
5.3 Medium | — | 0,45% | 13 Okt 2026 |
|
CVE-2026-109403
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/jav...
|
7.3 High | — | 0,35% | 13 Okt 2026 |
|
CVE-2026-94410
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach,...
|
4.3 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-89279
Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing.
This issue affects authtake: from v1.3 before v1.4.
|
6.5 Medium | — | 0,09% | 13 Okt 2026 |
|
CVE-2026-63316
A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an aut...
|
8.7 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-109832
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERR...
|
7.5 High | — | 0,41% | 13 Okt 2026 |
|
CVE-2026-109402
A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/...
|
6.3 Medium | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-109190
A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API...
|
6.3 Medium | — | 0,33% | 13 Okt 2026 |
|
CVE-2026-109189
A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend...
|
6.3 Medium | — | 0,32% | 13 Okt 2026 |
|
CVE-2026-109160
A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/ja...
|
4.3 Medium | — | 0,25% | 13 Okt 2026 |
|
CVE-2026-109157
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a m...
|
9.9 Critical | — | 0,59% | 13 Okt 2026 |
|
CVE-2026-109156
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Ha...
|
6.3 Medium | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-109155
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The att...
|
6.3 Medium | — | 0,40% | 13 Okt 2026 |
|
CVE-2026-109153
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Che...
|
6.3 Medium | — | 0,49% | 13 Okt 2026 |
|
CVE-2026-89208
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (Al...
|
5.3 Medium | — | 0,42% | 13 Okt 2026 |
|
CVE-2026-89206
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to...
|
6.3 Medium | — | 0,28% | 13 Okt 2026 |
|
CVE-2026-89205
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to...
|
6.3 Medium | — | 0,28% | 13 Okt 2026 |