Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
87afabe8 by Salvatore Bonaccorso at 2026-08-20T12:49:10+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -93,31 +93,31 @@ CVE-2026-76878 (In OpenStack Aodh before 22.0.1, the alarm
list API bypasses pro
NOTE: https://launchpad.net/bugs/2161771
NOTE: https://security.openstack.org/ossa/OSSA-2026-036.html
CVE-2026-76850 (LMDeploy deserializes disaggregated-serving peer messages with
pickle. ...)
- TODO: check
+ NOT-FOR-US: InternLM LMDeploy
CVE-2026-76832 (Agno's PythonTools in libs/agno/agno/tools/python.py contains
a path t ...)
- TODO: check
+ NOT-FOR-US: Agno
CVE-2026-76827 (A flaw was found in search-indexer. This vulnerability allows
a regist ...)
- TODO: check
+ NOT-FOR-US: search-indexer
CVE-2026-76800 (A flaw has been found in DeDeCMS 3. Affected by this
vulnerability is ...)
- TODO: check
+ NOT-FOR-US: DeDeCMS
CVE-2026-76799 (A weakness has been identified in code-projects Login
Registration Sys ...)
NOT-FOR-US: code-projects
CVE-2026-76795 (A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0.
This imp ...)
- TODO: check
+ NOT-FOR-US: AeternaLabsHQ PullMD
CVE-2026-76785 (A security flaw has been discovered in amirsanni
Mini-Inventory-and-Sa ...)
- TODO: check
+ NOT-FOR-US: Mini-Inventory-and-Sales-Management-System
CVE-2026-76783 (A security vulnerability has been detected in DeDeCMS
53_1_UTF8. This ...)
- TODO: check
+ NOT-FOR-US: DeDeCMS
CVE-2026-76764 (A flaw has been found in code-projects Employee Management
System 1.0. ...)
NOT-FOR-US: code-projects
CVE-2026-76762 (A vulnerability was detected in code-projects Assessment
Management 1. ...)
- TODO: check
+ NOT-FOR-US: code-projects Assessment Management
CVE-2026-76761 (A vulnerability was identified in chenhg5 cc-connect up to
1.4.1. This ...)
- TODO: check
+ NOT-FOR-US: chenhg5 cc-connect
CVE-2026-76760 (A vulnerability was found in chenhg5 cc-connect up to 1.4.1.
Affected ...)
- TODO: check
+ NOT-FOR-US: chenhg5 cc-connect
CVE-2026-76647 (Leantime JSON-RPC API through version 3.9.0 contains a missing
authori ...)
- TODO: check
+ NOT-FOR-US: Leantime
CVE-2026-76591 (A security flaw has been discovered in TRENDnet TEW-755AP up
to 202607 ...)
NOT-FOR-US: TRENDnet
CVE-2026-76590 (A vulnerability was identified in TRENDnet TEW-755AP up to
20260702. A ...)
@@ -131,11 +131,11 @@ CVE-2026-76583 (A vulnerability was identified in
TRENDnet TV-IP751WIC 11.03.03.
CVE-2026-76582 (A vulnerability was determined in TRENDnet TEW-821DAP
2.2.01b05. Affec ...)
NOT-FOR-US: TRENDnet
CVE-2026-76576 (A vulnerability was found in yangzongzhuan RuoYi-Vue up to
3.9.2. This ...)
- TODO: check
+ NOT-FOR-US: yangzongzhuan RuoYi-Vue
CVE-2026-76574 (A flaw has been found in code-projects Hospital Information
System 1.0 ...)
NOT-FOR-US: code-projects
CVE-2026-76572 (A vulnerability was detected in pkp pkp-lib up to
3.3.0-22/3.4.0-10/3. ...)
- TODO: check
+ NOT-FOR-US: pkp pkp-lib
CVE-2026-76405 (In Splunk On-Call (VictorOps) app versions below 1.0.43 on
Splunkbase, ...)
NOT-FOR-US: Cisco
CVE-2026-76404 (In Splunk MCP Server app versions below 1.2.1, a user who
holds the "a ...)
@@ -357,13 +357,13 @@ CVE-2026-76252 (In Splunk Enterprise versions below
10.4.2, 10.2.6, 10.0.9, and
CVE-2026-76251 (In Splunk Enterprise versions below 10.4.2, 10.2.6, and
10.0.9, a user ...)
NOT-FOR-US: Cisco
CVE-2026-76139 (A flaw was found in acm-operator-bundle. The build process for
this co ...)
- TODO: check
+ NOT-FOR-US: acm-operator-bundle
CVE-2026-75963 (The Events Made Easy plugin for WordPress is vulnerable to
Local File ...)
NOT-FOR-US: WordPress plugin
CVE-2026-75860 (The JSON Options WordPress plugin through 0.0.4 does not have
any capa ...)
NOT-FOR-US: WordPress plugin
CVE-2026-75628 (Punk::OAuth2 versions before 0.03 for Perl allow an
attacker-chosen of ...)
- TODO: check
+ NOT-FOR-US: Punk::OAuth2 Perl module
CVE-2026-75616 (An OS command injection vulnerability exists in the web
management int ...)
NOT-FOR-US: TPLink
CVE-2026-75596 (Netty is an asynchronous, event-driven network application
framework. ...)
@@ -373,7 +373,7 @@ CVE-2026-75595 (Netty is an asynchronous, event-driven
network application frame
CVE-2026-75593 (BuildKit is a toolkit for converting source code to build
artifacts in ...)
TODO: check
CVE-2026-75569 (A flaw was found in mce-operator-bundle. The build process
fetches and ...)
- TODO: check
+ NOT-FOR-US: mce-operator-bundle
CVE-2026-75476 (Tanium addressed a compression bomb vulnerability in Threat
Response.)
NOT-FOR-US: Tanium
CVE-2026-75112 (A security issue exists within OTTO\xae Fleet Manager. The
vulnerabili ...)
@@ -387,9 +387,9 @@ CVE-2026-74227
CVE-2026-74226
REJECTED
CVE-2026-73542 (Multiple SEIKO EPSON printers and scanners contain revoked
root certif ...)
- TODO: check
+ NOT-FOR-US: EPSON
CVE-2026-71368 (F-RevoCRM contains a cross-site scripting vulnerability. If a
user vie ...)
- TODO: check
+ NOT-FOR-US: F-RevoCRM
CVE-2026-69550 (Out-of-bounds read in Remote Desktop Client allows an
unauthorized att ...)
NOT-FOR-US: Microsoft
CVE-2026-69222 (LiquidJS is a Shopify / GitHub Pages compatible template
engine in pur ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87afabe814c4f6b1de0d6f16e9c432f8b4e1258a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87afabe814c4f6b1de0d6f16e9c432f8b4e1258a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
