Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
355418ac by security tracker role at 2026-08-01T07:13:25+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2026-9044 (An OS command injection vulnerability exists in the VPN module
of TP-L ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-7623 (The SureForms \u2013 Contact Form, Payment Form & Other Custom
Form Bu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-68771 (ComfyUI v0.23.0 contains an unsafe deserialization
vulnerability in th ...)
TODO: check
CVE-2026-68770 (sentence-transformers contains a security control bypass
vulnerability ...)
@@ -55,7 +55,7 @@ CVE-2026-45330 (Decidim is a participatory democracy
framework. Prior to 0.30.9,
CVE-2026-45086 (Decidim is a participatory democracy framework. From 0.31.1
before 0.3 ...)
TODO: check
CVE-2026-3141 (The FormGent plugin for WordPress is vulnerable to unauthorized
arbitr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-38713 (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23,
WR1300 ...)
TODO: check
CVE-2026-38711 (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23,
WR1300 ...)
@@ -65,81 +65,81 @@ CVE-2026-38710 (TR1200 v2.4.15 and TR3000 v2.4.21 were
discovered to contain a c
CVE-2026-38708 (TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23,
WR1300 ...)
TODO: check
CVE-2026-34641 (Premiere Pro is affected by an out-of-bounds write
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-18394 (Incorrect authorization in the http_request tool in Strands
Agents Too ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-15932 (The Support Genix WordPress plugin before 1.4.48 does not
prevent dir ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15414 (The Subscriptions for WooCommerce plugin for WordPress is
vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15403 (The Pinpoint Booking System \u2013 Version 2 plugin for
WordPress is v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15368 (The User Profile Builder WordPress plugin before 3.16.4 does
not corr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15262 (The Admin Columns for ACF Fields WordPress plugin through
0.3.2 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15244 (The HUSKY WordPress plugin before 1.4.1 does not sanitize a
stored se ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15234 (The Codeless Page Builder WordPress plugin through 1.1.4 does
not sani ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-15006 (The Bit integrations \u2013 Form Integration, Webhook,
Spreadsheets, C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14840 (The YOP Poll WordPress plugin before 7.0.6 does not validate
the conne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14839 (The Mapster WP Maps WordPress plugin before 1.24.0 does not
perform an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14836 (The Login & Register Forms WordPress plugin before 3.2.5 does
not pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14823 (The Event Tickets and Registration WordPress plugin before
5.29.0.1 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14822 (The Event Tickets and Registration WordPress plugin before
5.29.0.1 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14596 (The DynamicKit for Elementor WordPress plugin before 1.0.3
does not va ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14561 (The Authora : Easy login with mobile number WordPress plugin
before 1. ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14315 (The Pixel Tag Manager for WooCommerce WordPress plugin before
2.2.1 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14309 (The Chat On Desk Order Notifications WordPress plugin before
1.0.9 do ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14292 (The Download Manager WordPress plugin before 3.3.66 does not
properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14214 (The Booking for Appointments and Events Calendar WordPress
plugin bef ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14197 (The Fluent Support WordPress plugin before 2.3.1 does not
perform a p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14195 (The Brizy WordPress plugin before 2.8.18 does not properly
verify aut ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13729 (The Podlove Podcast Publisher WordPress plugin before 4.5.3
does not p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13725 (The Dynamic Pricing With Discount Rules for WooCommerce
WordPress plug ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13604 (The Pixelavo WordPress plugin before 1.5.4 registers an
unauthenticat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13596 (The Participants Database WordPress plugin before 2.7.8.4 does
not pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13362 (The SendPulse Email Marketing Newsletter plugin for WordPress
is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13329 (The Buckaroo Woocommerce Payments Plugin WordPress plugin
before 4.9.0 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13158 (The Everest Toolkit WordPress plugin through 1.2.3 does not
validate t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13157 (The Demo Import WordPress plugin through 1.1.3 does not
validate the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12966 (The Direct Payments for WooCommerce WordPress plugin before
2.5.3 doe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12696 (The wpForo Forum WordPress plugin before 3.1.2 does not
sanitize and e ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11882 (The Builderall for WordPress plugin before 3.0.2 does not bind
the sta ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-10827 (The Spectra Legacy WordPress plugin before 2.20.0 does not
validate o ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-69948 (SourceCodester Modern Loan Management System 1.0 is vulnerable
to SQL ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2025-69946 (SourceCodester Modern Loan Management System 1.0 is vulnerable
to SQL ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2025-15669 (The Bit Form WordPress plugin before 3.1.4 does not sanitise
one of i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-56818
- netty <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2507476
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/355418ac25f22a8028d4d122ca0d25a9fe127391
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/355418ac25f22a8028d4d122ca0d25a9fe127391
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
