377,174 CVE lengkap 1999–2026

CVE Notifier

Arsip lengkap dari cve.org (CVE Record), skor CVSS dari NVD, dan daftar eksploitasi aktif dari CISA KEV. Ter-update tiap 30 menit.

Lihat feed Sumber data

arsip 377,174 CVE • 12,754 critical • 1,713 KEV

1999–2026
395.000+ CVE
cve.org
NVD CVSS
CISA KEV
Auto-update 30m
SQLite full-text

Feed Kerentanan

Semua Critical (≥9) High (7-9) KEV WordPress

Menampilkan 12 dari 377,174 entri — halaman 293/31432

CVE-2026-55225 CWE-269 8.0

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacker who can create a Kafka custom resource can set Kafka.spec.e…

cve.org strimzi:strimzi-kafka-operator 15 Sep 2026

CVE-2026-12150 CWE-121 7.0

IBM MQ queue manager is vulnerable to denial of service

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote att…

cve.org IBM:MQ 15 Sep 2026

CVE-2026-12351 CWE-74 9.8

IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection

IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 LTS, and 10.0.0.0 could allow a remote attacker to execute arbitrary code due to unsafe JNDI lookup p…

cve.org IBM:MQ 15 Sep 2026

CVE-2026-55226 CWE-269 5.4

Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, deploying only the Topic Operator or only the User Operator through the…

cve.org strimzi:strimzi-kafka-operator 15 Sep 2026

CVE-2026-54251 CWE-664 N/A

netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/o…

cve.org netty:netty-incubator-codec-ohttp · io.netty.incubator:netty-incubator-codec-ohttp 15 Sep 2026

CVE-2026-12354 CWE-913 7.5

IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection

cve.org IBM:MQ 15 Sep 2026

CVE-2026-12355 CWE-74 8.1

IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution

cve.org IBM:MQ 15 Sep 2026

CVE-2026-12358 CWE-674 N/A

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.

cve.org IBM:Verify · Identity · Access 15 Sep 2026

CVE-2026-54050 CWE-639 6.5

Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Image

Sakai is a Collaboration and Learning Environment (CLE). From 23.0 until 23.5 and 25.3, the DELETE /api/users/{userId}/profile/image endpoint allows an authenticated user to delete another user's profile image because Pr…

cve.org sakaiproject:sakai 15 Sep 2026

CVE-2026-44300 CWE-20 N/A

OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection

OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to invoke AddServiceKey without mandatory aut…

cve.org opencost:opencost 15 Sep 2026

CVE-2026-12666 CWE-611 8.1

IBM MQ Java messaging is vulnerable to XML external entity injection

cve.org IBM:MQ 15 Sep 2026

CVE-2026-12667 CWE-611 7.1

IBM MQ .NET client is vulnerable to XML external entity injection

cve.org IBM:MQ 15 Sep 2026

Statistik

Arsip lengkap kerentanan dari semua sumber — live dari database.

cache/cve.db • 30 Sep 2026 05:00

377,174 Total CVE terindeks

▲ 1999–2026

60,905 Tahun 2026

12,754 Critical (skor ≥ 9)

1,713 CISA KEV aktif

Distribusi Severity

CVSS v3

12,754 critical

Critical 12,754 (8%)
High 61,345 (41%)
Medium 68,090 (45%)
Low 8,634 (6%)

150,872 dinilai • 226,302 belum

Tren CVE per Tahun

1999–2026

2017

2018

2019

2020

2021

2022

2023

2024

2025

2026

cve.org

Arsip penuh CVE dari CVE Program — id, deskripsi, CWE, referensi.

245,461 CVE Record

NVD

Kerentanan dengan skor CVSS v3.x dari NIST National Vulnerability Database.

150,872 CVSS dinilai

Wordfence

Kerentanan plugin/theme WordPress dari Wordfence Intelligence.

11,134 WordPress

WPScan

Kerentanan ekosistem WordPress dari WPScan (Patchstack).

5,444 WordPress

GitHub

CVE yang menyentuh ekosistem GitHub (judul/deskripsi/produk).

3,208 Ekosistem

MITRE

CNA asli yang menerbitkan dan mengelola CVE Record.

114,963 CNA Publish

Sumber Data

cve.org

Arsip CVE Program — id, deskripsi, CWE, referensi. Update tiap 30 menit via delta release.

NVD

Skor CVSS v3.1 untuk entri yang dinilai NIST NVD.

CISA KEV

Kerentanan yang aktif dieksploitasi — prioritas tinggi.

WPScan

Kerentanan ekosistem WordPress.

Wordfence

Kerentanan plugin/theme WordPress.

GitHub

Security Advisories ekosistem open source.