Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-21126
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
|
6.9 Medium | — | 0,16% | 12 Okt 2026 |
|
CVE-2026-21125
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary c...
|
8.6 High | — | 0,17% | 12 Okt 2026 |
|
CVE-2026-21124
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitr...
|
8.6 High | — | 0,17% | 12 Okt 2026 |
|
CVE-2026-21123
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in...
|
6.7 Medium | — | 0,14% | 12 Okt 2026 |
|
CVE-2026-21122
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
|
7.0 High | — | 0,17% | 12 Okt 2026 |
|
CVE-2026-21121
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
|
6.9 Medium | — | 0,15% | 12 Okt 2026 |
|
CVE-2026-21120
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
|
8.9 High | — | 0,17% | 12 Okt 2026 |
|
CVE-2026-21119
Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
|
4.8 Medium | — | 0,14% | 12 Okt 2026 |
|
CVE-2026-21118
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.
|
6.9 Medium | — | 0,13% | 12 Okt 2026 |
|
CVE-2026-21117
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
|
5.1 Medium | — | 0,15% | 12 Okt 2026 |
|
CVE-2026-21116
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
|
5.1 Medium | — | 0,16% | 12 Okt 2026 |
|
CVE-2026-21115
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
|
5.1 Medium | — | 0,16% | 12 Okt 2026 |
|
CVE-2026-21114
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
|
7.0 High | — | 0,17% | 12 Okt 2026 |
|
CVE-2026-108801
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Per...
|
6.3 Medium | — | 0,33% | 12 Okt 2026 |
|
CVE-2026-108800
A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attac...
|
4.3 Medium | — | 0,21% | 12 Okt 2026 |
|
CVE-2026-108799
A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/...
|
7.3 High | — | 0,39% | 12 Okt 2026 |
|
CVE-2026-108798
A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptogra...
|
7.3 High | — | 0,28% | 12 Okt 2026 |
|
CVE-2026-108797
A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component...
|
4.3 Medium | — | 0,22% | 12 Okt 2026 |
|
CVE-2026-108796
A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint....
|
4.3 Medium | — | 0,22% | 12 Okt 2026 |
|
CVE-2026-108795
A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the...
|
4.3 Medium | — | 0,20% | 12 Okt 2026 |
|
CVE-2026-108985
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_ar...
|
7.1 High | — | 0,18% | 12 Okt 2026 |
|
CVE-2026-108982
VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its asso...
|
7.2 High | — | 0,11% | 12 Okt 2026 |
|
CVE-2026-108981
ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same...
|
3.6 Low | — | 0,12% | 12 Okt 2026 |
|
CVE-2026-108794
A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v...
|
6.3 Medium | — | 0,20% | 12 Okt 2026 |
|
CVE-2026-108791
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system...
|
4.3 Medium | — | 0,37% | 12 Okt 2026 |
|
CVE-2026-108790
A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /s...
|
4.7 Medium | — | 0,54% | 12 Okt 2026 |
|
CVE-2026-108789
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipula...
|
5.5 Medium | — | 0,18% | 12 Okt 2026 |
|
CVE-2026-107437
GV-E-Map
Server V18.2.0A contains a plaintext database password embedded within an
application component. The credential can be recovered through static analysis
of the d...
|
6.2 Medium | — | 0,11% | 12 Okt 2026 |
|
CVE-2026-87765
In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This coul...
|
5.5 Medium | — | 0,10% | 12 Okt 2026 |
|
CVE-2026-66086
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote c...
|
9.8 Critical | — | 0,46% | 12 Okt 2026 |
|
CVE-2026-66085
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no ad...
|
5.5 Medium | — | 0,11% | 12 Okt 2026 |
|
CVE-2026-108980
Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in serve...
|
8.8 High | — | 1,1% | 12 Okt 2026 |
|
CVE-2026-108788
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipula...
|
5.3 Medium | — | 0,11% | 12 Okt 2026 |
|
CVE-2026-108787
A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component colle...
|
6.3 Medium | — | 0,20% | 12 Okt 2026 |
|
CVE-2026-108786
A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the componen...
|
6.3 Medium | — | 0,20% | 12 Okt 2026 |
|
CVE-2026-108785
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAu...
|
6.3 Medium | — | 0,29% | 12 Okt 2026 |
|
CVE-2026-108784
A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/...
|
6.5 Medium | — | 0,57% | 12 Okt 2026 |
|
CVE-2026-108783
A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Downloa...
|
7.3 High | — | 0,38% | 12 Okt 2026 |
|
CVE-2026-108782
A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/o...
|
6.3 Medium | — | 0,19% | 12 Okt 2026 |
|
CVE-2026-108781
A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src...
|
6.3 Medium | — | 0,20% | 12 Okt 2026 |
|
CVE-2026-108779
A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/cont...
|
6.3 Medium | — | 0,19% | 12 Okt 2026 |
|
CVE-2026-108778
A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controll...
|
6.3 Medium | — | 0,19% | 12 Okt 2026 |
|
CVE-2026-108777
A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/Wv...
|
6.3 Medium | — | 0,19% | 12 Okt 2026 |
|
CVE-2026-108775
A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/control...
|
6.3 Medium | — | 0,30% | 12 Okt 2026 |
|
CVE-2026-108774
A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/contro...
|
6.3 Medium | — | 0,30% | 12 Okt 2026 |
|
CVE-2026-108773
A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHCont...
|
6.3 Medium | — | 0,19% | 11 Okt 2026 |
|
CVE-2026-108772
A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go...
|
5.3 Medium | — | 0,70% | 11 Okt 2026 |
|
CVE-2026-108770
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Scre...
|
5.3 Medium | — | 0,41% | 11 Okt 2026 |
|
CVE-2026-108978
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.
This issue affects rlottie: e57b094f03c39a751a1f...
|
5.5 Medium | — | 0,15% | 11 Okt 2026 |
|
CVE-2026-108769
A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manip...
|
4.3 Medium | — | 0,45% | 11 Okt 2026 |