Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-108960
A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallth...
|
5.3 Medium | — | 0,15% | 13 Okt 2026 |
|
CVE-2026-108959
A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipu...
|
6.3 Medium | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-108958
A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading....
|
6.3 Medium | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-108957
A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config...
|
6.3 Medium | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-97229
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
10.0 Critical | — | 0,56% | 13 Okt 2026 |
|
CVE-2026-96893
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, cou...
|
7.3 High | — | 0,55% | 13 Okt 2026 |
|
CVE-2026-92883
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
8.7 High | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-9268
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, cou...
|
4.3 Medium | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-92528
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, co...
|
4.2 Medium | — | 0,13% | 13 Okt 2026 |
|
CVE-2026-85529
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
5.3 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-84284
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions,...
|
5.3 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-82632
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
3.1 Low | — | 0,18% | 13 Okt 2026 |
|
CVE-2026-81839
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, cou...
|
7.7 High | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-78335
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
4.2 Medium | — | 0,16% | 13 Okt 2026 |
|
CVE-2026-7767
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
5.8 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-6567
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
4.3 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-5954
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
4.2 Medium | — | 0,16% | 13 Okt 2026 |
|
CVE-2026-35001
OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with...
|
7.0 High | — | 0,20% | 13 Okt 2026 |
|
CVE-2026-16301
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
8.5 High | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-16275
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
5.3 Medium | — | 0,23% | 13 Okt 2026 |
|
CVE-2026-14814
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have...
|
8.2 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-14552
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
4.3 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-14210
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
4.3 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-108956
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/...
|
7.3 High | — | 0,26% | 13 Okt 2026 |
|
CVE-2026-108955
A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of t...
|
5.3 Medium | — | 0,11% | 13 Okt 2026 |
|
CVE-2026-108954
A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/of...
|
6.3 Medium | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-108948
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/user...
|
5.4 Medium | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-108947
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manip...
|
5.3 Medium | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-105458
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, cou...
|
4.3 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-104661
gitlab
GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, cou...
|
4.3 Medium | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-103549
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
2.7 Low | — | 0,22% | 13 Okt 2026 |
|
CVE-2026-101168
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
6.2 Medium | — | 0,16% | 13 Okt 2026 |
|
CVE-2026-100755
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment c...
|
4.6 Medium | — | 0,08% | 13 Okt 2026 |
|
CVE-2026-100104
gitlab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,...
|
3.5 Low | — | 0,19% | 13 Okt 2026 |
|
CVE-2026-89124
Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated...
|
4.3 Medium | — | 0,17% | 13 Okt 2026 |
|
CVE-2026-89122
SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when cl...
|
6.1 Medium | — | 0,15% | 13 Okt 2026 |
|
CVE-2026-89121
SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low p...
|
4.7 Medium | — | 0,09% | 13 Okt 2026 |
|
CVE-2026-89120
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction...
|
7.1 High | — | 0,24% | 13 Okt 2026 |
|
CVE-2026-89118
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low im...
|
5.3 Medium | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-89117
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and...
|
6.1 Medium | — | 0,17% | 13 Okt 2026 |
|
CVE-2026-89116
The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands...
|
5.9 Medium | — | 0,17% | 13 Okt 2026 |
|
CVE-2026-89113
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially...
|
8.8 High | — | 0,35% | 13 Okt 2026 |
|
CVE-2026-89112
The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified us...
|
6.5 Medium | — | 0,21% | 13 Okt 2026 |
|
CVE-2026-89111
The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can re...
|
10.0 Critical | — | 0,27% | 13 Okt 2026 |
|
CVE-2026-89110
SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal oper...
|
9.9 Critical | — | 0,31% | 13 Okt 2026 |
|
CVE-2026-89108
SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII ad...
|
9.1 Critical | — | 0,30% | 13 Okt 2026 |
|
CVE-2026-89107
SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripti...
|
9.9 Critical | — | 0,37% | 13 Okt 2026 |
|
CVE-2026-89106
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later re...
|
4.4 Medium | — | 0,13% | 13 Okt 2026 |
|
CVE-2026-89105
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allow...
|
4.2 Medium | — | 0,14% | 13 Okt 2026 |
|
CVE-2026-87689
The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this ser...
|
9.8 Critical | — | 0,37% | 13 Okt 2026 |