Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-20308
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of se...
|
4.3 Medium | — | 0,44% | 5 Agt 2026 |
|
CVE-2026-20304
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal securit...
|
9.9 Critical | — | 0,42% | 5 Agt 2026 |
|
CVE-2026-20303
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal securit...
|
9.9 Critical | — | 0,49% | 5 Agt 2026 |
|
CVE-2026-20301
cisco ios
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of Cisco IOS Software and Cisco IOS XE Software coul...
|
8.6 High | — | 0,57% | 5 Agt 2026 |
|
CVE-2026-20294
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clea...
|
6.5 Medium | — | 0,21% | 5 Agt 2026 |
|
CVE-2026-20289
cisco roomos, cisco roomos cloud
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.
This vulnera...
|
6.5 Medium | — | 0,33% | 5 Agt 2026 |
|
CVE-2026-20288
cisco unified computing system
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with Admin privileges to execute arbitrary commands...
|
6.5 Medium | — | 0,64% | 5 Agt 2026 |
|
CVE-2026-20273
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
8.6 High | — | 0,47% | 5 Agt 2026 |
|
CVE-2026-20272
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
9.8 Critical | — | 0,57% | 5 Agt 2026 |
|
CVE-2026-20271
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
8.6 High | — | 0,47% | 5 Agt 2026 |
|
CVE-2026-20270
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
8.6 High | — | 0,47% | 5 Agt 2026 |
|
CVE-2026-20269
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
8.6 High | — | 0,47% | 5 Agt 2026 |
|
CVE-2026-20268
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
8.6 High | — | 0,47% | 5 Agt 2026 |
|
CVE-2026-20267
cisco ios xe
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal securit...
|
9.0 Critical | — | 0,38% | 5 Agt 2026 |
|
CVE-2026-20263
cisco ios xe
A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of se...
|
8.6 High | — | 0,57% | 5 Agt 2026 |
|
CVE-2026-20200
cisco unified computing system
A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with low privileges to execute arbitrary commands on the...
|
8.8 High | — | 0,73% | 5 Agt 2026 |
|
CVE-2026-20198
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-sit...
|
4.8 Medium | — | 0,29% | 5 Agt 2026 |
|
CVE-2026-20124
cisco ios xe
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected dev...
|
7.7 High | — | 0,50% | 5 Agt 2026 |
|
CVE-2026-20028
A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with...
|
5.0 Medium | — | 0,35% | 5 Agt 2026 |
|
CVE-2026-18927
A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects...
|
6.3 Medium | — | 0,35% | 5 Agt 2026 |
|
CVE-2026-17630
langflow
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code due to improper validation of configuration parameters.
|
8.8 High | — | 0,76% | 5 Agt 2026 |
|
CVE-2026-17626
langflow
IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read, modify, or expose sensitive host files via Docker-based MCP servers due to i...
|
8.8 High | — | 0,42% | 5 Agt 2026 |
|
CVE-2026-17623
langflow
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP ser...
|
8.8 High | — | 0,79% | 5 Agt 2026 |
|
CVE-2026-17617
ibm application gateway operator
IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resourc...
|
9.8 Critical | — | 0,34% | 5 Agt 2026 |
|
CVE-2026-14587
neo4j
Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends a selected...
|
7.5 High | — | 0,54% | 5 Agt 2026 |
|
CVE-2026-9203
progress marklogic server
A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protect...
|
8.5 High | — | 0,34% | 5 Agt 2026 |
|
CVE-2026-9195
progress marklogic server
A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated admini...
|
9.3 Critical | — | 0,65% | 5 Agt 2026 |
|
CVE-2026-9193
progress marklogic server
An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-pri...
|
9.9 Critical | — | 0,46% | 5 Agt 2026 |
|
CVE-2026-9192
progress marklogic server
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass pa...
|
9.8 Critical | — | 0,84% | 5 Agt 2026 |
|
CVE-2026-9190
progress marklogic server
An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass authentication and...
|
9.1 Critical | — | 0,74% | 5 Agt 2026 |
|
CVE-2026-8709
progress marklogic server
An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user...
|
9.9 Critical | — | 0,46% | 5 Agt 2026 |
|
CVE-2026-8400
ibm websphere application server
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technolo...
|
9.8 Critical | — | 0,48% | 5 Agt 2026 |
|
CVE-2026-7557
progress marklogic server
An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauth...
|
9.1 Critical | — | 0,46% | 5 Agt 2026 |
|
CVE-2026-7329
progress marklogic server
An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authent...
|
9.9 Critical | — | 0,57% | 5 Agt 2026 |
|
CVE-2026-7327
progress marklogic server
An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated...
|
8.1 High | — | 0,39% | 5 Agt 2026 |
|
CVE-2026-7326
progress marklogic server
A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated admin...
|
8.8 High | — | 0,21% | 5 Agt 2026 |
|
CVE-2026-70606
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protoc...
|
5.9 Medium | — | 0,26% | 5 Agt 2026 |
|
CVE-2026-70605
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, when following...
|
5.9 Medium | — | 0,32% | 5 Agt 2026 |
|
CVE-2026-70604
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme regi...
|
7.4 High | — | 0,35% | 5 Agt 2026 |
|
CVE-2026-70603
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath...
|
6.0 Medium | — | 0,13% | 5 Agt 2026 |
|
CVE-2026-70602
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, extension tab...
|
6.6 Medium | — | 0,26% | 5 Agt 2026 |
|
CVE-2026-70601
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.5, apps that expo...
|
7.5 High | — | 0,29% | 5 Agt 2026 |
|
CVE-2026-70600
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native aut...
|
4.3 Medium | — | 0,18% | 5 Agt 2026 |
|
CVE-2026-70599
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1, serial-port an...
|
5.9 Medium | — | 0,19% | 5 Agt 2026 |
|
CVE-2026-70598
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen ren...
|
3.9 Low | — | 0,14% | 5 Agt 2026 |
|
CVE-2026-70597
electronjs electron
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Elec...
|
6.3 Medium | — | 0,10% | 5 Agt 2026 |
|
CVE-2026-70596
Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in feature_image_cap...
|
4.3 Medium | — | 0,32% | 5 Agt 2026 |
|
CVE-2026-70595
Ghost is a Node.js content management system. From 6.26.0 until 6.54.1, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthentic...
|
4.0 Medium | — | 0,28% | 5 Agt 2026 |
|
CVE-2026-60053
apache answer
Insufficient Session Expiration vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.1.
Administrative API keys remained usable after the ownin...
|
9.1 Critical | — | 0,57% | 5 Agt 2026 |
|
CVE-2026-60023
apache answer
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.1.
Deleted or pending answers c...
|
7.5 High | — | 0,62% | 5 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.