Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-19508
Heap-based buffer overflow in the multipart form-data parser in `jst_post.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to c...
|
9.8 Critical | — | 0,98% | 19 Agt 2026 |
|
CVE-2026-19507
Uncontrolled resource consumption in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote unauthenticated attacker to cause denial of service via e...
|
7.5 High | — | 0,61% | 19 Agt 2026 |
|
CVE-2026-19506
Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain unauthorized access via concurrent authentication requests...
|
8.1 High | — | 0,48% | 19 Agt 2026 |
|
CVE-2026-19505
Improper cryptographic signature verification in `jst_functions.c` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to bypass authentication and o...
|
9.8 Critical | — | 0,51% | 19 Agt 2026 |
|
CVE-2026-18871
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +17 lainnya
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An a...
|
7.3 High | — | 0,14% | 19 Agt 2026 |
|
CVE-2026-18821
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerab...
|
8.8 High | — | 0,29% | 19 Agt 2026 |
|
CVE-2026-17414
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 Power Systems Firmware is affected by a vulnerab...
|
8.8 High | — | 0,30% | 19 Agt 2026 |
|
CVE-2026-17097
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hy...
|
6.7 Medium | — | 0,14% | 19 Agt 2026 |
|
CVE-2026-17091
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the PowerVM hy...
|
8.4 High | — | 0,15% | 19 Agt 2026 |
|
CVE-2026-17063
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +17 lainnya
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the interface between the BMC/FSP and...
|
7.9 High | — | 0,16% | 19 Agt 2026 |
|
CVE-2026-17042
ibm power system s922 (9009-22g) firmware, ibm power system h922 (9223-22s) firmware +8 lainnya
IBM Power Systems Firmware FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.00 - OP940.81 (Power HMC) is affected by a vulnerability in host firmw...
|
7.3 High | — | 0,14% | 19 Agt 2026 |
|
CVE-2026-17028
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +24 lainnya
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in partition firm...
|
6.5 Medium | — | 0,28% | 19 Agt 2026 |
|
CVE-2026-16933
ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +27 lainnya
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9), and OP940.0...
|
8.2 High | — | 0,17% | 19 Agt 2026 |
|
CVE-2026-16919
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16917
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16914
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.
|
6.7 Medium | — | 0,17% | 19 Agt 2026 |
|
CVE-2026-16913
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16911
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.
|
8.8 High | — | 0,75% | 19 Agt 2026 |
|
CVE-2026-16909
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.
|
8.8 High | — | 0,42% | 19 Agt 2026 |
|
CVE-2026-16903
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.
|
9.6 Critical | — | 0,42% | 19 Agt 2026 |
|
CVE-2026-16901
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
|
8.8 High | — | 0,42% | 19 Agt 2026 |
|
CVE-2026-16897
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.
|
4.4 Medium | — | 0,14% | 19 Agt 2026 |
|
CVE-2026-16894
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16891
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
|
3.3 Low | — | 0,14% | 19 Agt 2026 |
|
CVE-2026-16890
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow.
|
3.6 Low | — | 0,11% | 19 Agt 2026 |
|
CVE-2026-16888
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability.
|
3.7 Low | — | 0,50% | 19 Agt 2026 |
|
CVE-2026-16886
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
|
4.3 Medium | — | 0,28% | 19 Agt 2026 |
|
CVE-2026-16885
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16883
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.
|
5.5 Medium | — | 0,15% | 19 Agt 2026 |
|
CVE-2026-16882
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS...
|
9.8 Critical | — | 0,86% | 19 Agt 2026 |
|
CVE-2026-16877
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
|
8.8 High | — | 0,75% | 19 Agt 2026 |
|
CVE-2026-16875
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to shell metacharacter injection.
|
7.8 High | — | 0,22% | 19 Agt 2026 |
|
CVE-2026-16874
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain root privileges due to improper enforcement of RBAC authentication roles.
|
7.8 High | — | 0,17% | 19 Agt 2026 |
|
CVE-2026-16873
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write.
|
7.8 High | — | 0,15% | 19 Agt 2026 |
|
CVE-2026-16872
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16869
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improperly scrubbed environment variables.
|
7.8 High | — | 0,17% | 19 Agt 2026 |
|
CVE-2026-16866
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
|
4.8 Medium | — | 0,34% | 19 Agt 2026 |
|
CVE-2026-16865
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection.
|
8.8 High | — | 1,9% | 19 Agt 2026 |
|
CVE-2026-16864
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16862
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
|
CVE-2026-16857
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to manipulate network traffic and DNS configuration due to improper authentication.
|
8.2 High | — | 0,60% | 19 Agt 2026 |
|
CVE-2026-16855
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow.
|
5.5 Medium | — | 0,13% | 19 Agt 2026 |
|
CVE-2026-16852
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow.
|
7.5 High | — | 0,55% | 19 Agt 2026 |
|
CVE-2026-16851
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a use-after-free.
|
7.4 High | — | 0,31% | 19 Agt 2026 |
|
CVE-2026-16850
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements.
|
8.8 High | — | 1,5% | 19 Agt 2026 |
|
CVE-2026-16849
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an improper check for an array index boundary.
|
4.3 Medium | — | 0,28% | 19 Agt 2026 |
|
CVE-2026-16848
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP o...
|
8.8 High | — | 0,50% | 19 Agt 2026 |
|
CVE-2026-16847
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
|
8.8 High | — | 0,41% | 19 Agt 2026 |
|
CVE-2026-16846
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference.
|
6.5 Medium | — | 0,31% | 19 Agt 2026 |
|
CVE-2026-16845
ibm aix, ibm vios
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
|
9.8 Critical | — | 0,80% | 19 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.