CSIRT-Kabupaten

529

Total Peringatan KEV

140

Tingkat Critical

514

Eksploitasi Aktif

Vektor Ransomware

Menampilkan 171-180 dari total 529 advisory

Unknown In-The-Wild Exploited [ CVE-2025-43300 ]

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.

Apple iOS, iPadOS, and macOS Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9.4 In-The-Wild Exploited [ CVE-2025-54948 ]

Trend Micro Apex One OS Command Injection Vulnerability

Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

Trend Micro Apex One Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited Ransomware Known [ CVE-2025-8088 ]

RARLAB WinRAR Path Traversal Vulnerability

RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. This vulnerability could allow an attacker to execute arbitrary code by crafting malicious archive files.

RARLAB WinRAR Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-8876 ]

N-able N-Central Command Injection Vulnerability

N-able N-Central contains a command injection vulnerability via improper sanitization of user input.

N-able N-Central Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 8.1 In-The-Wild Exploited [ CVE-2025-48384 ]

Git Link Following Vulnerability

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files.

Git Git Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9 In-The-Wild Exploited [ CVE-2025-5086 ]

Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.

Dassault Systèmes DELMIA Apriso Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-48543 ]

Android Runtime Use-After-Free Vulnerability

Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.

Android Runtime Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9 In-The-Wild Exploited [ CVE-2025-53690 ]

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.

Sitecore Multiple Products Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 7.8 In-The-Wild Exploited [ CVE-2025-38352 ]

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.

Linux Kernel Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-9377 ]

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

TP-Link Multiple Routers Rilis: 01 Oct 2026

Detail Mitigasi

Security Advisories