[ EARLY WARNING // KNOWN EXPLOITED VULNERABILITIES ]
Security Advisories
Katalog resmi peringatan dini kerentanan keamanan siber yang dieksploitasi secara aktif (Known Exploited Vulnerabilities - KEV) untuk mitigasi dini dan penguatan pertahanan digital Pemerintah Kabupaten Ciamis.
Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.
Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.
Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets.
Motex
LANSCOPE Endpoint Manager
Rilis: 01 Oct 2026
Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
Broadcom
VMware Aria Operations and VMware Tools
Rilis: 01 Oct 2026
Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.
Gladinet
CentreStack and Triofox
Rilis: 01 Oct 2026
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.