Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
624445c8 by security tracker role at 2026-09-27T07:14:20+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,63 +1,63 @@
CVE-2026-97319 (The PowerPress Podcasting plugin by Blubrry WordPress plugin
before 11 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97227 (The NextScripts: Social Networks Auto-Poster WordPress plugin
before 4 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96899 (The Optima Express IDX WordPress plugin before 8.7.6 does not
properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96897 (The Optima Express IDX WordPress plugin before 8.7.6 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96896 (The Malcure Malware Shield \u2014 Removal, Repair, Monitor
WordPress p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96895 (The WP YouTube Lyte WordPress plugin before 1.7.31 does not
escape som ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94408 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94400 (Uncontrolled Resource Consumption (CWE-400) in Kibana can lead
denial ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94399 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94398 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94397 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94396 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-92995 (The Verge3D Publishing and E-Commerce WordPress plugin through
4.13.0 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92436 (The Mailchimp for WooCommerce WordPress plugin before 6.3 does
not req ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89006 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89003 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89001 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89000 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86841 (The Online Scheduling and Appointment Booking System
WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86839 (The Online Scheduling and Appointment Booking System
WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86609 (The Download Manager WordPress plugin before 7.5.6 does not
sanitise a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85002 (The EmbedPress WordPress plugin before 4.6.7 does not escape
one of i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84069 (The WebFacing\u2122 WordPress plugin before 5.4 does not
restrict acc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82841 (The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin
before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82300 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-82294 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch
can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-81655 (The Ad Inserter WordPress plugin before 2.8.19 does not
correctly res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-78582 (Missing Authorization (CWE-862) in Kibana can lead to
unauthorized del ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-72668 (Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441)
in Kiba ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-72662 (Authorization Bypass Through User-Controlled Key (CWE-639) in
Kibana c ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-100865 (Heym before 0.0.53 contains multiple independent
vulnerabilities. (1) ...)
TODO: check
CVE-2026-100864 (heym before 0.0.91 contains a sandbox escape vulnerability in
the expr ...)
@@ -127,11 +127,11 @@ CVE-2026-100833 (Contrast (edgelesssys/contrast) versions
1.14.0 before 1.23.1 g
CVE-2026-100746 (A vulnerability was found in coollabsio Coolify up to 4.1.0.
This affe ...)
TODO: check
CVE-2026-100745 (A vulnerability has been found in Edimax BR-6428nC 1.16. The
impacted ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-100744 (A flaw has been found in coollabsio Coolify up to 4.1.2. The
affected ...)
TODO: check
CVE-2026-100740 (A vulnerability was detected in D-Link DIR-895L A1_102b07.
Impacted is ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-100739 (A vulnerability was detected in mathurvishal
CloudClassroom-PHP-Projec ...)
TODO: check
CVE-2026-100725 (http4k (Maven artifact org.http4k:http4k-core) before
6.48.0.0, 5.42.0 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/624445c8bb16dcf7fd8ea398a419cb7a9e8af3c4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/624445c8bb16dcf7fd8ea398a419cb7a9e8af3c4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
