Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a81a53ff by security tracker role at 2026-09-28T19:12:45+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,35 +1,421 @@
-CVE-2026-85644
+CVE-2026-97686 (Wind River VxWorks 7 prior to 26.09, specific system call
arguments ca ...)
+ TODO: check
+CVE-2026-97399 (The strncasecmp function in the GNU C Library 2.24 and later
optimized ...)
+ TODO: check
+CVE-2026-97335 (Incorrect authorization in the custom storage volume creation
endpoint ...)
+ TODO: check
+CVE-2026-96740 (A flaw was found in the StreamsHub Console for Apache Kafka.
Tenant-su ...)
+ TODO: check
+CVE-2026-96538 (WarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a
missing auth ...)
+ TODO: check
+CVE-2026-95104 (Stack-based buffer overflow vulnerability exists in BUFFALO
Wi-Fi prod ...)
+ TODO: check
+CVE-2026-94287 (A denial of service via unsigned underflow in libXpm's write
path in l ...)
+ TODO: check
+CVE-2026-94286 (An out-of-bounds read in libXtst's RECORD reply parser in
libXtst befo ...)
+ TODO: check
+CVE-2026-94285 (An out-of-bounds read in libX11's byte-oriented codeset parser
in libX ...)
+ TODO: check
+CVE-2026-94284 (An out-of-bounds read vulnerability in libX11's XIM
trigger-key regist ...)
+ TODO: check
+CVE-2026-94283 (An out-of-bounds read vulnerability in libX11's XIM (X Input
Method) a ...)
+ TODO: check
+CVE-2026-94194 (Inconsistent Interpretation of HTTP Requests ('HTTP
Request/Response S ...)
+ TODO: check
+CVE-2026-93540 (A privilege mismatch was found in Fleet. When a bundle
requested names ...)
+ TODO: check
+CVE-2026-93539 (A vulnerability was discovered in Fleet's Git webhook receiver
(the gi ...)
+ TODO: check
+CVE-2026-93538 (A cross-tenant authorization issue was discovered in SUSE
Rancher Flee ...)
+ TODO: check
+CVE-2026-93537 (A user who can supply bundle content to a repository
referenced by a G ...)
+ TODO: check
+CVE-2026-93348 (Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented
in Unsl ...)
+ TODO: check
+CVE-2026-92103 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
+ TODO: check
+CVE-2026-91206 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-91204 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-91154 (Missing Authentication for Critical Function (CWE-306) in the
product ...)
+ TODO: check
+CVE-2026-91043 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
+ TODO: check
+CVE-2026-90926 (Improper Control of Generation of Code ('Code Injection')
vulnerabilit ...)
+ TODO: check
+CVE-2026-90925 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-90924 (Use of default credentials vulnerability in Innotim Software,
Telecomm ...)
+ TODO: check
+CVE-2026-88808 (A vulnerability has been identified within Rancher Manager
where the F ...)
+ TODO: check
+CVE-2026-88805 (Incorrect credential cleaning on logout could be used by
remote attack ...)
+ TODO: check
+CVE-2026-88804 (An unauthenticated update of public UI settings could be used
by remot ...)
+ TODO: check
+CVE-2026-87969 (An OS command injection vulnerability in the WatchGuard AP
diagnostic ...)
+ TODO: check
+CVE-2026-87799 (Improper link resolution in the migration receive path in
Canonical LX ...)
+ TODO: check
+CVE-2026-87798 (Improper link resolution in the recursive file pull feature of
the LXD ...)
+ TODO: check
+CVE-2026-87752 (Improper neutralization of input during web page generation
('cross-si ...)
+ TODO: check
+CVE-2026-87114 (A flaw was found in kube-compare. When processing a
'container://' ref ...)
+ TODO: check
+CVE-2026-86595 (Improper neutralization of special elements used in an SQL
command ('S ...)
+ TODO: check
+CVE-2026-86530 (BUFFALO Wi-Fi products handle some web form input improperly
to assemb ...)
+ TODO: check
+CVE-2026-86507 (Improper neutralization of input in Apache Roller 6.1.5 allows
an anon ...)
+ TODO: check
+CVE-2026-86335 (Missing Authorization in imageDownload in Canonical LXD before
5.0.10, ...)
+ TODO: check
+CVE-2026-86334 (Path traversal in the CLI client image export and copy
functionality i ...)
+ TODO: check
+CVE-2026-86330 (An OS command injection flaw was found in the
set_hostname_internal fu ...)
+ TODO: check
+CVE-2026-86102 (An OS command injection vulnerability in the WatchGuard AP
internal AP ...)
+ TODO: check
+CVE-2026-85526 (Path traversal in the Btrfs storage driver (unpackVolume) in
Canonical ...)
+ TODO: check
+CVE-2026-85185 (Path traversal in the btrfs storage driver in Canonical LXD
versions 4 ...)
+ TODO: check
+CVE-2026-85134 (Unrestricted upload of file with dangerous type vulnerability
in Bimse ...)
+ TODO: check
+CVE-2026-84894 (In moxygen before commit 004123dd24c3,
MoQSession::dataStreamReadLoop ...)
+ TODO: check
+CVE-2026-82969 (Improper neutralization of input during web page generation
('cross-si ...)
+ TODO: check
+CVE-2026-82936 (mH-DEVELOPER smart home module is vulnerable to Denial of
Service due ...)
+ TODO: check
+CVE-2026-82935 (mH-DEVELOPER smart home module ships with an end-of-life,
unsupported ...)
+ TODO: check
+CVE-2026-82933 (mH-DEVELOPER smart home module sends its web interface and API
traffic ...)
+ TODO: check
+CVE-2026-82932 (mH-DEVELOPER smart home module does not load any firewall
rules at sta ...)
+ TODO: check
+CVE-2026-82930 (mH-DEVELOPER smart home module does not verify tokens in its
authoriza ...)
+ TODO: check
+CVE-2026-82929 (mH-DEVELOPER smart home module uses the same hard-coded SSH
host keys ...)
+ TODO: check
+CVE-2026-82928 (mH-DEVELOPER smart home module contains a hardcoded SSH public
key in ...)
+ TODO: check
+CVE-2026-82915 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-82546 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-82387 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-82386 (Improper Restriction of XML External Entity Reference in
Apache Roller ...)
+ TODO: check
+CVE-2026-82385 (Exposure of Sensitive Information to an Unauthorized Actor in
Apache R ...)
+ TODO: check
+CVE-2026-82384 (Deserialization of Untrusted Data in Apache Roller 6.1.5
allows an una ...)
+ TODO: check
+CVE-2026-82383 (Missing Authentication for Critical Function in Apache Roller
6.1.5 al ...)
+ TODO: check
+CVE-2026-82382 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-82381 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
+ TODO: check
+CVE-2026-82380 (Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5
allows a remo ...)
+ TODO: check
+CVE-2026-82379 (Authentication Bypass by Capture-replay in Apache Roller 6.1.5
allows ...)
+ TODO: check
+CVE-2026-82378 (Incorrect Authorization in the OAuth 1.0a authorization
endpoint of Ap ...)
+ TODO: check
+CVE-2026-82377 (Missing Authorization in Apache Roller 6.1.5 allows an
authenticated u ...)
+ TODO: check
+CVE-2026-82376 (Improper Restriction of XML External Entity Reference in
Apache Roller ...)
+ TODO: check
+CVE-2026-82375 (Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5
allows an au ...)
+ TODO: check
+CVE-2026-82348 (Authorization Bypass Through User-Controlled Key in Apache
Roller 6.1. ...)
+ TODO: check
+CVE-2026-82326 (Improper neutralization of input during web page generation
('cross-si ...)
+ TODO: check
+CVE-2026-82323 (Authorization bypass through User-Controlled key vulnerability
in Enoc ...)
+ TODO: check
+CVE-2026-81867 (A Deserialization of Untrusted Data vulnerability in the
JavaScript Ta ...)
+ TODO: check
+CVE-2026-81375 (A Confused Deputy vulnerability in the EmailTask component in
Google C ...)
+ TODO: check
+CVE-2026-80359 (Dell Boot Optimized Server Storage (BOSS), versions prior to
2.2.13.20 ...)
+ TODO: check
+CVE-2026-80358 (Dell Boot Optimized Server Storage (BOSS), versions prior to
2.2.13.20 ...)
+ TODO: check
+CVE-2026-80357 (Dell Boot Optimized Server Storage (BOSS), versions prior to
2.2.13.20 ...)
+ TODO: check
+CVE-2026-7172 (Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the
followi ...)
+ TODO: check
+CVE-2026-7171 (Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the
followi ...)
+ TODO: check
+CVE-2026-7170 (Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the
followi ...)
+ TODO: check
+CVE-2026-78424 (Improper parameter handling in NeuVector allows any
authenticated user ...)
+ TODO: check
+CVE-2026-75600 (FreePBX is an open source IP PBX. Prior to version 17.0.9,
authenticat ...)
+ TODO: check
+CVE-2026-73642 (Dayforce Payroll is vulnerable to Path Traversal in file
download func ...)
+ TODO: check
+CVE-2026-73641 (Dayforce Payroll is vulnerable to Reflected XSS in multiple
endpoints. ...)
+ TODO: check
+CVE-2026-73640 (Dayforce Payroll is vulnerable to Time Based-Blind SQL
Injection in pa ...)
+ TODO: check
+CVE-2026-70413 (Dell Live Optics Collector, versions prior to 27.2.13.310,
contain(s) ...)
+ TODO: check
+CVE-2026-59563 (Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where
HMAC co ...)
+ TODO: check
+CVE-2026-58464
+ REJECTED
+CVE-2026-58463
+ REJECTED
+CVE-2026-55160 (Stringer is a self-hosted, anti-social RSS reader. Prior to
commit 75c ...)
+ TODO: check
+CVE-2026-55157 (Token Optimizer MCP measures token savings per AI coding
agent, optimi ...)
+ TODO: check
+CVE-2026-55156 (Token Optimizer MCP measures token savings per AI coding
agent, optimi ...)
+ TODO: check
+CVE-2026-55096 (fast-mcp-telegram is a Telegram MCP Server. Prior to version
30.1, the ...)
+ TODO: check
+CVE-2026-54710 (FreePBX is an open source IP PBX. Prior to versions 16.0.40
and 17.0.7 ...)
+ TODO: check
+CVE-2026-54708 (FreePBX is an open source IP PBX. Prior to versions 16.0.72
and 17.0.7 ...)
+ TODO: check
+CVE-2026-54675 (FreePBX is an open source IP PBX. Prior to versions 16.0.10
and 17.0.5 ...)
+ TODO: check
+CVE-2026-54674 (FreePBX is an open source IP PBX. Prior to versions 16.0.39
and 17.0.7 ...)
+ TODO: check
+CVE-2026-54160 (Network UPS Tools is a collection of programs which provide a
common i ...)
+ TODO: check
+CVE-2026-52749 (The Kaon AR2140X router improperly issues session cookies in
responses ...)
+ TODO: check
+CVE-2026-52748 (The Kaon AR2140X router contains a vulnerability where the
backup func ...)
+ TODO: check
+CVE-2026-4556 (Exam4 is affected by a local privilege escalation vulnerability
in the ...)
+ TODO: check
+CVE-2026-49994 (Bluehood monitors local bluetooth activity. Prior to version
0.7.1, wh ...)
+ TODO: check
+CVE-2026-48100 (Payy is an Ethereum L2 zk-rollup for privacy preserving and
regulatory ...)
+ TODO: check
+CVE-2026-45562 (FreePBX is an open source IP PBX. Prior to versions 16.0.4 and
17.0.6, ...)
+ TODO: check
+CVE-2026-19759 (An Incorrect Authorization vulnerabilityin the task
configuration in G ...)
+ TODO: check
+CVE-2026-19444 (A path traversal vulnerability was discovered in the
Kuberneteskubectl ...)
+ TODO: check
+CVE-2026-18825 (An Origin Validation Error in the middleware of the
connect-xcors npm ...)
+ TODO: check
+CVE-2026-15953 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
+ TODO: check
+CVE-2026-15952 (Incorrect Permission Assignment for Critical Resource
vulnerability in ...)
+ TODO: check
+CVE-2026-13018 (Insufficient validation of untrusted input in Codecs in Google
Chrome ...)
+ TODO: check
+CVE-2026-12342 (This vulnerability impacts all versions of IdentityIQ and
allows an un ...)
+ TODO: check
+CVE-2026-12269 (Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a
Keepali ...)
+ TODO: check
+CVE-2026-12268 (ManageEngine DDI Central versions below 6201 are vulnerable
toPowerShe ...)
+ TODO: check
+CVE-2026-12267 (ManageEngine DDI Central versions below 6201 are vulnerable
toCommand ...)
+ TODO: check
+CVE-2026-12265 (Zohocorp ManageEngine DDI Central versions before 6201 are
vulnerable ...)
+ TODO: check
+CVE-2026-12264 (Zohocorp ManageEngine DDI Central versions before 6201 are
vulnerable ...)
+ TODO: check
+CVE-2026-102010 (A flaw was found in GCC. When an application calls the
erase_if functi ...)
+ TODO: check
+CVE-2026-101913 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
+ TODO: check
+CVE-2026-101912 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
+ TODO: check
+CVE-2026-101911 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
+ TODO: check
+CVE-2026-101910 (ip-address is a library for parsing and manipulating IPv4 and
IPv6 add ...)
+ TODO: check
+CVE-2026-101909 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101908 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101907 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101906 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101905 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101904 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101903 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101902 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101901 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101900 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101898 (Axios is a promise-based HTTP client for the browser and
Node.js. From ...)
+ TODO: check
+CVE-2026-101894 (The decompress package for Node.js extracts archives. Prior
to 10.2.2 ...)
+ TODO: check
+CVE-2026-101891 (An improper access control vulnerability in an internal API
service on ...)
+ TODO: check
+CVE-2026-101861 (Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0
contain an unsa ...)
+ TODO: check
+CVE-2026-101333 (A flaw was found in the Micrometer user-event metrics
listener of Keyc ...)
+ TODO: check
+CVE-2026-101292 (Apache ActiveMQ Artemis before 2.34.0 contains an unsafe
reflection vu ...)
+ TODO: check
+CVE-2026-101132 (A security flaw has been discovered in DeepSeek
deepseek-harness up to ...)
+ TODO: check
+CVE-2026-101131 (A vulnerability was identified in deepseek-ai
deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-101111 (Joomla Extension - ordasoft.com - Reflected Cross-Site
Scripting in Bo ...)
+ TODO: check
+CVE-2026-101110 (Joomla Extension - ordasoft.com - Unauthenticated SQL
Injection in Boo ...)
+ TODO: check
+CVE-2026-101109 (Joomla Extension - ordasoft.com - Reflected Cross-Site
Scripting in Ve ...)
+ TODO: check
+CVE-2026-101108 (Joomla Extension - ordasoft.com - Unauthenticated SQL
Injection in Veh ...)
+ TODO: check
+CVE-2026-101105 (A vulnerability was determined in code-projects Matrimonial
System 1.0 ...)
+ TODO: check
+CVE-2026-101102 (A vulnerability was found in deepseek-ai deepseek-harness up
to 0.1.0- ...)
+ TODO: check
+CVE-2026-101101 (A vulnerability has been found in ag-ui-protocol ag-ui up to
2026-09-0 ...)
+ TODO: check
+CVE-2026-101100 (A flaw has been found in ag-ui-protocol ag-ui up to
2026-09-07. This v ...)
+ TODO: check
+CVE-2026-101099 (A vulnerability was detected in ag-ui-protocol ag-ui up to
2026-09-23. ...)
+ TODO: check
+CVE-2026-101098 (A security vulnerability has been detected in ag-ui-protocol
ag-ui up ...)
+ TODO: check
+CVE-2026-101083 (A security vulnerability has been detected in PMWeb
v7.x/v8.x/v2025.x. ...)
+ TODO: check
+CVE-2026-101082 (A weakness has been identified in PMWeb 7.x/8.x/2025.x. This
issue aff ...)
+ TODO: check
+CVE-2026-101081 (A security flaw has been discovered in D-Link DI-8400 16.07.
This vuln ...)
+ TODO: check
+CVE-2026-101080 (A vulnerability was identified in Tencent AI-Infra-Guard up
to 4.5.2/4 ...)
+ TODO: check
+CVE-2026-101079 (A vulnerability was found in agentverus agentverus-scanner up
to 0.8.1 ...)
+ TODO: check
+CVE-2026-101078 (A vulnerability has been found in deepseek-ai
deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-101077 (A flaw has been found in Netcore NR289-GE 1.4.5102. This
impacts the f ...)
+ TODO: check
+CVE-2026-101076 (A vulnerability was detected in Netcore NR289-GE 1.4.5102.
This affect ...)
+ TODO: check
+CVE-2026-101075 (A security vulnerability has been detected in Netcore
NR289-GE 1.4.510 ...)
+ TODO: check
+CVE-2026-101074 (A weakness has been identified in Netcore NR289-GE 1.4.5102.
The affec ...)
+ TODO: check
+CVE-2026-101073 (A security flaw has been discovered in Netcore NR289-GE
1.4.5102. Impa ...)
+ TODO: check
+CVE-2026-101072 (A vulnerability was identified in Netcore NR289-GE 1.4.5102.
This issu ...)
+ TODO: check
+CVE-2026-101071 (A vulnerability was determined in Acrel Electric Unet Web
Service up t ...)
+ TODO: check
+CVE-2026-101070 (A security vulnerability has been detected in dbgate up to
7.3.1. Affe ...)
+ TODO: check
+CVE-2026-101069 (A weakness has been identified in dbgate up to 7.3.1.
Affected is the ...)
+ TODO: check
+CVE-2026-101068 (A security flaw has been discovered in dbgate up to 7.3.1.
This impact ...)
+ TODO: check
+CVE-2026-101067 (A vulnerability was identified in dbgate up to
6.8.1/7.0.2/7.1.8/7.2.5 ...)
+ TODO: check
+CVE-2026-101066 (A vulnerability was determined in dbgate up to 7.3.1. The
impacted ele ...)
+ TODO: check
+CVE-2026-101055 (A security flaw has been discovered in Thinkware U3000 up to
1.02.04. ...)
+ TODO: check
+CVE-2026-101054 (A vulnerability was identified in Thinkware U3000 up to
1.02.04. Affec ...)
+ TODO: check
+CVE-2026-101053 (A vulnerability was determined in Thinkware U3000 up to
1.02.04. This ...)
+ TODO: check
+CVE-2026-101052 (A security vulnerability has been detected in refly-ai refly
up to 1.1 ...)
+ TODO: check
+CVE-2026-101040 (A security flaw has been discovered in Ricoh SP 330DN, SP
221, SP C252 ...)
+ TODO: check
+CVE-2026-101039 (A vulnerability was identified in FAST FAC1900R
20190827_2.0.2. Affect ...)
+ TODO: check
+CVE-2026-101038 (A vulnerability was determined in FAST FAC1200R
5.0_20201119_1.0.2. Af ...)
+ TODO: check
+CVE-2026-101037 (A vulnerability was found in FAST FAC1200R
5.0_20201119_1.0.2. Affecte ...)
+ TODO: check
+CVE-2026-101036 (A vulnerability has been found in FLB-Music FLB-Music-Player
1.1.8/1.1 ...)
+ TODO: check
+CVE-2026-101035 (A flaw has been found in aligungr UERANSIM up to 3.3.0. This
affects t ...)
+ TODO: check
+CVE-2026-101018 (A vulnerability was determined in dayrui XunruiCMS up to
4.7.2. This i ...)
+ TODO: check
+CVE-2026-101017 (A vulnerability was found in Trusted Domain Project OpenDMARC
up to 1. ...)
+ TODO: check
+CVE-2026-101016 (A vulnerability has been found in Trusted Domain Project
OpenDMARC up ...)
+ TODO: check
+CVE-2026-101015 (A flaw has been found in Trusted Domain Project OpenDMARC up
to 1.4.2. ...)
+ TODO: check
+CVE-2026-101014 (A vulnerability was detected in Trusted Domain Project
OpenDMARC up to ...)
+ TODO: check
+CVE-2026-101013 (A security vulnerability has been detected in mathurvishal
CloudClassr ...)
+ TODO: check
+CVE-2026-101012 (A weakness has been identified in mathurvishal
CloudClassroom-PHP-Proj ...)
+ TODO: check
+CVE-2026-101011 (A security flaw has been discovered in aaPanel BaoTa up to
11.8.0. Thi ...)
+ TODO: check
+CVE-2026-101010 (A vulnerability was identified in aaPanel BaoTa up to 11.8.0.
The impa ...)
+ TODO: check
+CVE-2026-101009 (A vulnerability was determined in aaPanel BaoTa up to 11.8.0.
The affe ...)
+ TODO: check
+CVE-2026-101008 (A vulnerability was found in aaPanel BaoTa up to 11.8.0.
Impacted is t ...)
+ TODO: check
+CVE-2026-100753 (Joomla Extension - ordasoft.com - Reflected Cross-Site
Scripting in Re ...)
+ TODO: check
+CVE-2026-100752 (Joomla Extension - ordasoft.com - Unauthenticated SQL
Injection in Rea ...)
+ TODO: check
+CVE-2026-100751 (Joomla Extension - regularlabs.com - Privileged stored XSS
via data-rl ...)
+ TODO: check
+CVE-2026-100750 (Joomla Extension - regularlabs.com - LFI / SSRF in Modules
Anywhere 1. ...)
+ TODO: check
+CVE-2026-85644 (XS::Parse::Infix versions from 0.40 through 0.49 for Perl
treat a numb ...)
- libxs-parse-keyword-perl <unfixed> (bug #1149243)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43916020/
NOTE:
https://metacpan.org/release/PEVANS/XS-Parse-Keyword-0.50/diff/PEVANS/XS-Parse-Keyword-0.49/src/infix.c
-CVE-2026-91006
+CVE-2026-91006 (Apache Karaf's instance-management service
(InstanceServiceImpl) build ...)
- apache-karaf <itp> (bug #881297)
CVE-2026-92142
- apache-karaf <itp> (bug #881297)
CVE-2026-91085
- apache-karaf <itp> (bug #881297)
-CVE-2026-90979
+CVE-2026-90979 (LDAPCacheandLDAPBackingEnginebuild LDAP search filters for
user lookup ...)
- apache-karaf <itp> (bug #881297)
CVE-2026-91012
- apache-karaf <itp> (bug #881297)
CVE-2026-91048
- apache-karaf <itp> (bug #881297)
CVE-2026-97024
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-8xgq-v545-vgvf
-CVE-2026-97023
+CVE-2026-97023 (A path traversal vulnerability in Flatpak's handling of the
export/bin ...)
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-5p67-xh8x-rq54
CVE-2026-97025
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-7rvf-rqr3-43j4
CVE-2026-97026
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-r9w3-qx54-qvc8
CVE-2026-97027
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-v64f-hrwr-j4vh
CVE-2026-97029
+ {DSA-6524-1}
- flatpak 1.18.4-1
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-f3p8-vr7v-gxf2
CVE-2026-XXXX [GHSA-r9hj-j2rw-4q3m: PCRE2: out-of-bounds write in JIT matching
with large stack allocations]
@@ -3448,7 +3834,7 @@ CVE-2026-94604
REJECTED
CVE-2026-94416 (An authorization bypass was found in the Ansible Automation
Platform ( ...)
NOT-FOR-US: Red Hat Ansible Automation Platform
-CVE-2026-94282
+CVE-2026-94282 (An out-of-bounds read in libXi's XI2 enter/leave/focus cookie
conversi ...)
- libxi <unfixed> (bug #1148965)
[trixie] - libxi <no-dsa> (Minor issue)
[bookworm] - libxi <postponed> (Minor issue)
@@ -3908,11 +4294,11 @@ CVE-2026-97404 (In OpenStack Zaqar before 22.0.2, WSGI
transport mishandles the
- zaqar 23.0.0~rc1-3 (bug #1148897)
[trixie] - zaqar <no-dsa> (Minor issue)
NOTE: https://security.openstack.org/ossa/OSSA-2026-042.html
-CVE-2026-88816 [Fix FetchHashKeyName on IV/NV]
+CVE-2026-88816 (DBI versions before 1.654 for Perl incorrectly treat numeric
values as ...)
- libdbi-perl 1.654-1 (bug #1149042)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43915934/
NOTE: Fixed by:
https://github.com/perl5-dbi/dbi/commit/70962570212dc60a5428098cf2a0462ad5945851
(1.654)
-CVE-2026-88815 [Fix DBI::sql_type_cast on IV/NV]
+CVE-2026-88815 (DBI versions before 1.654 for Perl incorrectly treat numeric
values as ...)
- libdbi-perl 1.654-1 (bug #1149042)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/43915930/
NOTE: Fixed by:
https://github.com/perl5-dbi/dbi/commit/e5ad87e5602da995d28b4d65df222368b58d6702
(1.654)
@@ -5080,7 +5466,7 @@ CVE-2026-93368 (The Rename wp-login.php to anything you
want plugin for WordPres
NOT-FOR-US: WordPress plugin
CVE-2026-93352 (Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete
patch for C ...)
NOT-FOR-US: Laravel-Mediable
-CVE-2026-93349 (Frictionless through 5.20.0rc1 contains an OS command
injection vulner ...)
+CVE-2026-93349 (Frictionless before 5.19.1 contains an OS command injection
vulnerabil ...)
NOT-FOR-US: Frictionless
CVE-2026-92874 (GitLab has remediated an issue in GitLab CE/EE affecting all
versions ...)
NOT-FOR-US: GitLab (used to be packaged in the Debian archive as
src:gitlab, but never in a stable release)
@@ -7105,6 +7491,7 @@ CVE-2026-88414 (MCMS 6.1.1 through 6.2.1 contains a SQL
injection vulnerability
CVE-2026-88010 (Traefik is an open source HTTP reverse proxy and load
balancer. From 3 ...)
- traefik <itp> (bug #983289)
CVE-2026-87902 (An unauthenticated attacker can make `get_page_template()`
page-templa ...)
+ {DSA-6525-1}
- wordpress 7.1.2+dfsg1-1 (bug #1148743)
NOTE:
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp
CVE-2026-87119 (Authentication Bypass by Capture-replay in ZenHive mpp allows
an attac ...)
@@ -8539,7 +8926,7 @@ CVE-2026-93992 (Gopeed through 2.0.0-beta.3 contains a
path traversal vulnerabil
NOT-FOR-US: Gopeed
CVE-2026-93991 (Argo Workflows versions 4.1.0 through 4.1.3 contain an
authorization b ...)
NOT-FOR-US: Argo Workflows
-CVE-2026-93990 (Expat through 2.8.4 fails to validate low surrogates following
high su ...)
+CVE-2026-93990 (Expat before 2.8.5 fails to validate that a high surrogate in
UTF-16 i ...)
- expat 2.8.4-2 (bug #1148665)
NOTE: https://github.com/libexpat/libexpat/pull/1282
NOTE: Fixed by:
https://github.com/libexpat/libexpat/commit/0cfd15bdf4b2c22d6b0df73610709dfb60921091
(R_2_8_5)
@@ -9467,18 +9854,22 @@ CVE-2026-84449 (libheif is a HEIF and AVIF file format
decoder and encoder. Prio
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-2c3g-p585-8rpq
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/e29953da30eb11aa1762df0bff3b36be4b22fbe3
(v1.19.6)
CVE-2026-84448 (libheif is a HEIF and AVIF file format decoder and encoder.
Prior to 1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-p58j-h3vm-3fp5
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/646d85fbf5bd18fc3cdc516e915e59072de2d510
(v1.23.2)
CVE-2026-84447 (libheif is a HEIF and AVIF file format decoder and encoder. In
1.23.1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-x8xm-cm2c-cfc8
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/30b52a4e829efe0ee6d7208e8500b99f664af5e9
(v1.23.2)
CVE-2026-84446 (libheif is a HEIF and AVIF file format decoder and encoder.
Prior to 1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-xw34-mjcp-jqh8
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/3a7a69ae325f652e48c026b8241ab25bedf44d9b
(v1.23.2)
CVE-2026-84444 (libheif is a HEIF and AVIF file format decoder and encoder.
Prior to 1 ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-j264-xvrp-5v7q
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/e65071f59a1ac08aa1eb0d07a831deaf6bb4d03b
(v1.23.2)
@@ -9487,6 +9878,7 @@ CVE-2026-84400 (CareCam CM2507 IP cameras contain an
insufficiently protected ne
CVE-2026-84398 (CM2507 IP cameras accept an empty password for a privileged
account ex ...)
NOT-FOR-US: CM2507 IP cameras
CVE-2026-84384 (libheif is a HEIF and AVIF file format decoder and encoder.
From 1.19. ...)
+ {DSA-6523-1}
- libheif 1.23.2-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-24wx-9w62-c96w
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/21893e8f66c8b79363ca2809391b07d35e1a95ec
(v1.23.2)
@@ -9929,6 +10321,7 @@ CVE-2026-93018 (Imager versions before 1.036 for Perl
disclose uninitialised hea
NOTE:
https://github.com/tonycoz/imager/security/advisories/GHSA-j7v7-cm4g-vrgf
NOTE: Fixed by:
https://github.com/tonycoz/imager/commit/dcf0a52e2732399d42ab44d98af6934658d068ee
(v1.036)
CVE-2026-93485 (Improper neutralization of input during web page generation
('cross-si ...)
+ {DSA-6525-1}
- wordpress 7.1.1+dfsg1-1 (bug #1148368)
NOTE:
https://wordpress.org/news/2026/09/wordpress-7-1-1-maintenance-and-security-release/
CVE-2026-93468 (The OAKlouds developed by HGiga has an Arbitrary File Read
vulnerabili ...)
@@ -33093,6 +33486,7 @@ CVE-2026-80726 (In the Linux kernel, the following
vulnerability has been resolv
[trixie] - linux 6.12.105-1
NOTE:
https://git.kernel.org/linus/5ec42d57655c690234c14aece6dd3f209778c1d8 (7.2-rc7)
CVE-2026-84450 (libheif is a HEIF and AVIF file format decoder and encoder.
From 1.19. ...)
+ {DSA-6523-1}
- libheif 1.23.3-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-gh5q-69gg-c964
CVE-2026-XXXX [GHSA-x8r2-mggj-j6wr: Heap buffer overflow in unci
mixed-interleave decoding with unequal chroma bit depths]
@@ -33104,6 +33498,7 @@ CVE-2026-XXXX [GHSA-8fmq-r4pf-7m57: decoder deadlock
(DoS) via alpha-aux referen
[bookworm] - libheif <not-affected> (Introduced in 1.22)
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-8fmq-r4pf-7m57
CVE-2026-84451 (libheif is a HEIF and AVIF file format decoder and encoder.
From 1.19. ...)
+ {DSA-6523-1}
- libheif 1.23.3-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-hh47-fhqr-cj2r
CVE-2026-XXXX [GHSA-w7mc-p8jc-p853: heap OOB read / info disclosure
(Op_YCbCr420_to_RRGGBBaa]
@@ -37442,6 +37837,7 @@ CVE-2026-75758 (Uncontrolled Recursion vulnerability in
the Elixir standard libr
CVE-2026-73827 (SOY Calendar contains a cross-site scripting vulnerability. An
arbitra ...)
NOT-FOR-US: SOY
CVE-2026-73209 (An attacker that has valid credentials can send crafted
compressed dat ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-73209-imap-login-crash-self-recursion-on-zero-output-decompress-chunks
NOTE: Fixed by:
https://github.com/dovecot/core/commit/d0559b33adf1470547b6ee6ea7a82903296c5f69
@@ -37454,6 +37850,7 @@ CVE-2026-73209 (An attacker that has valid credentials
can send crafted compress
NOTE: Fixed by:
https://github.com/dovecot/core/commit/e9eb23933949f8cbdd13282071169dc89876c139
NOTE: Fixed by:
https://github.com/dovecot/core/commit/f740e63144970ee36d3ca6d38e52b81d405c6f67
CVE-2026-73208 (An attacker that holds a token intended for a different
purpose can au ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-73208-auth-db-oauth2-aud-claim-used-as-fallback-for-missing-scope-claim
NOTE: Same fixes for CVE-2026-40205 and CVE-2026-73208
@@ -37489,12 +37886,14 @@ CVE-2026-56854 (The source-address critical option in
the Permissions returned b
NOTE: https://github.com/golang/go/issues/80213
NOTE: Fixed by:
https://github.com/golang/crypto/commit/e557b08ec2b4f5dd00f38356919fc7b051dd88f8
(v0.55.0)
CVE-2026-52687 (An attacker that has valid credentials can select a
compression algori ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-52687-imap-compress-zstd-can-cause-excessive-memory-usage
NOTE: Fixed by:
https://github.com/dovecot/core/commit/65293cc0a6bc74f730b9ff036ec1e6456e671f88
NOTE: Fixed by:
https://github.com/dovecot/core/commit/e58c15ba1486a055462f7a2853a4b6a954e0eafa
NOTE: Fixed by:
https://github.com/dovecot/core/commit/b020b257c45d48c623db54909df4d3ae9b0975a1
CVE-2026-52681 (Sieve CPU resource usage is tracked in the compiled script, so
an atta ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-52681-sieve-resource-usage-tracking-lost-when-active-script-changes
NOTE: Fixed by:
https://github.com/dovecot/core/commit/8d52bc7d037cda5f27fe996511a5367752095812
@@ -37516,27 +37915,32 @@ CVE-2026-4378 (Improper neutralization of input
during web page generation ('cro
CVE-2026-4246 (The ElementsKit Pro plugin for WordPress is vulnerable to
Stored Cross ...)
NOT-FOR-US: WordPress plugin
CVE-2026-42395 (A host listed as a trusted proxy can send forwarding
information conta ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42395-single-nul-byte-xclient-forward-payload-crashes
NOTE: Fixed by:
https://github.com/dovecot/core/commit/0a1adbe37e03e859681bab6186494600b1c708ac
NOTE: Fixed by:
https://github.com/dovecot/core/commit/991780f2a9d567f9c2f4b136d96b0b35e1d8e9e1
CVE-2026-42393 (The comparison used for the doveadm password and API key is
not fully ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42393-doveadm-password-or-api-key-length-can-still-be-leaked-with-timing-comparisons
NOTE: Fixed by:
https://github.com/dovecot/core/commit/17212df02d002be8b310d41205b32e04da666a4b
NOTE: Fixed by:
https://github.com/dovecot/core/commit/647e76a865ba173f6182e211c57ec3c2942a6b04
CVE-2026-42392 (An attacker that has valid credentials can send an invalid
IMAP URLFET ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
[bookworm] - dovecot <not-affected> (Vulnerable code not present,
introduced in 2.4.0)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42392-imap-urlauth-leaks-memory-into-user-visible-error-messages
NOTE: Fixed by:
https://github.com/dovecot/core/commit/48d8141049f7150a0469a4efe68669fbf8bcbb24
NOTE: Introduced with:
https://github.com/dovecot/core/commit/bb193c273e63ffa42c5c0b51ecd8860398e3beab
(2.4.0)
CVE-2026-42391 (An unauthenticated attacker can send an IMAP ID command with a
very la ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42391-imap-pre-login-memory-cpu-growth-with-id-command
NOTE: Fixed by:
https://github.com/dovecot/core/commit/277e5c880a7f6a7741e717036570812910fff7b7
NOTE: Fixed by:
https://github.com/dovecot/core/commit/78518c10c7aa1236c1ed1ebb2d558ce24e6bc122
CVE-2026-42008 (Forwarding information received from a host listed as a
trusted proxy ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42008-xclient-forward-bare-token-not-namespaced-allows-nopassword-injection-via-trusted-proxy
NOTE: Fixed by:
https://github.com/dovecot/core/commit/da832e63e91d640e9a4bc57189c488cd97d99477
@@ -37544,6 +37948,7 @@ CVE-2026-42008 (Forwarding information received from a
host listed as a trusted
NOTE: Fixed by:
https://github.com/dovecot/core/commit/335abc77650a69860ff522ba87e714173a4e6049
NOTE: Fixed by:
https://github.com/dovecot/core/commit/7e60077cafabc3626a6bd7071b753e1c57415558
CVE-2026-42007 (An attacker that has valid credentials can use a Sieve script
with the ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-42007-sieve-editheader-rce
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/69bac9cd6d4ac09100ee50c98052be1437f1da29
@@ -37552,6 +37957,7 @@ CVE-2026-42007 (An attacker that has valid credentials
can use a Sieve script wi
CVE-2026-40541 (An improper neutralization of input during web page generation
('Cross ...)
NOT-FOR-US: Synology
CVE-2026-40205 (An attacker that holds an OAuth2 token granting only part of
the requi ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40205-oauth2-passdb-scope-enforcement-bypass-via-or-semantics-in-remote-validation-path
NOTE: Same fixes for CVE-2026-40205 and CVE-2026-73208
@@ -37559,6 +37965,7 @@ CVE-2026-40205 (An attacker that holds an OAuth2 token
granting only part of the
NOTE: Fixed by:
https://github.com/dovecot/core/commit/8518e3f62183b462bef645977b48af32e6701f6f
NOTE: Fixed by:
https://github.com/dovecot/core/commit/91b7a86a20f805301e8ea15715b246040c4d8cd9
CVE-2026-40204 (None None None No publicly available exploits are known.)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40204-acl-lda-mailbox-autocreate-can-bypass-acl-restrictions
NOTE: Fixed by:
https://github.com/dovecot/core/commit/7f2fbf017c479af0363aa35b2cd2dca4b92e16d2
@@ -37566,6 +37973,7 @@ CVE-2026-40204 (None None None No publicly available
exploits are known.)
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/f0dfa83a01194126d9a7688bcf30e730d5873b63
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/c211355da2ecdd2d858204468b12bd5667a44e30
CVE-2026-40203 (When IMAP compression is enabled, the same compression state
is reused ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40203-imap-compression-can-reveal-whether-a-small-synced-email-body-matches-sender-chosen-text
NOTE: Fixed by:
https://github.com/dovecot/core/commit/34787cb86a0147d987ab821772d310faab048ba6
@@ -37578,6 +37986,7 @@ CVE-2026-40019 (An unauthenticated attacker can send a
truncated quoted argument
[bookworm] - dovecot <not-affected> (Vulnerable code not present,
introduced in 2.4.3)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40019-v2-4-3-regression-managesieve-login-pre-auth-infinite-loop
CVE-2026-40018 (None None None No publicly available exploits are known.)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40018-mysql-multi-byte-escaping-wrong
NOTE: Fixed by:
https://github.com/dovecot/core/commit/a78c015eae67a891a0c14b5434dd1f99838ae4cc
@@ -37591,6 +38000,7 @@ CVE-2026-40018 (None None None No publicly available
exploits are known.)
NOTE: Fixed by:
https://github.com/dovecot/core/commit/ec4cbb78314dc46e77a2abab205969d80708d5f2
NOTE: Fixed by:
https://github.com/dovecot/core/commit/d3a4d4fc2d2c84403df6eea0da1c4b7bd1d887da
CVE-2026-40017 (An attacker that can send mail to a user can craft a message
header wh ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40017-imap-thread-o-m3-cpu-dos-via-crc32-hash-collision-in-strmap-mail-index-strmap-c-hash2-c
NOTE: Fixed by:
https://github.com/dovecot/core/commit/d3e1c7fb5845f68d84aa04d941b8116048b06195
@@ -37606,17 +38016,20 @@ CVE-2026-40017 (An attacker that can send mail to a
user can craft a message hea
NOTE: Fixed by:
https://github.com/dovecot/core/commit/4d886f42e4524ed4df27042e33546512f3fe20cf
NOTE: Fixed by:
https://github.com/dovecot/core/commit/8fedf386644e979f731854e53aa2e26d599776a5
CVE-2026-40015 (An attacker that has valid credentials can open many
connections to th ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40015-imap-hibernate-can-be-crashed
NOTE: Fixed by:
https://github.com/dovecot/core/commit/caeee3d1d2b725963555fe63ea8200292cad1058
NOTE: Fixed by:
https://github.com/dovecot/core/commit/09f7a34a6a9888d1325524ff8095d0a7793c075f
CVE-2026-40014 (An attacker that can send mail to a user can craft a message
header th ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40014-imap-thread-references-o-n2-cpu-dos-via-crafted-references-header-index-thread-links-c
NOTE: Fixed by:
https://github.com/dovecot/core/commit/113eac6cbbae1bf292e7dd1826eede3f929fe6c9
NOTE: Fixed by:
https://github.com/dovecot/core/commit/ad92d716328c646e4dcd4dd2aaa14bc3e422eb8d
NOTE: Fixed by:
https://github.com/dovecot/core/commit/f4e7474bdb5e7557ea3d985f9f27ef8d7f91ad68
CVE-2026-40013 (An attacker that has valid credentials can submit a Sieve
script conta ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-40013-pigeonhole-stack-buffer-underflow-in-pigeonhole-managesieve-checkscript-putscript
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/ebbf9fe427aa4f3c543abd4ef80564ff173856bc
@@ -37644,15 +38057,18 @@ CVE-2026-37236 (grpc-gateway v2.28.0 is vulnerable to
Incorrect Access Control.
[bookworm] - golang-github-grpc-ecosystem-grpc-gateway <postponed>
(Limited support)
NOTE:
https://github.com/grpc-ecosystem/grpc-gateway/commit/72123cd4f32545f6e1376873f412dcdcbcf29acc
(v2.29.0)
CVE-2026-33607 (An attacker that has valid credentials can use IMAP LIST
command to co ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33607-dovecot-imap-list-match-sub-exponential-backtracking-%E2%80%94-cpu-denial-of-service
NOTE: Fixed by:
https://github.com/dovecot/core/commit/2684624bb68ebbd440dab4d64d0b8be9ef5ea5aa
CVE-2026-33606 (Mail content stored by a user can be crafted so that it is
interpreted ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33606-dsync-mail-content-can-cause-dsync-protocol-injection
NOTE: Fixed by:
https://github.com/dovecot/core/commit/bd707cab9decd4a069c9cdfd3e28d28cf9346fdd
NOTE: Fixed by:
https://github.com/dovecot/core/commit/7d782e5f5e51f63483393a460594d6a8f920b6d6
CVE-2026-42394 [sieve: symlink traversal flaw could result in arbitrary file
disclosure]
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1
NOTE: Fixed by:
https://github.com/dovecot/core/commit/3b3e091effb83e0810ca55123bb5ebbe8ccbd7f5
NOTE: Fixed by:
https://github.com/dovecot/core/commit/70473a5e603863f7e862e939f4e5daea54cd4e45
@@ -37662,11 +38078,13 @@ CVE-2026-42394 [sieve: symlink traversal flaw could
result in arbitrary file dis
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/11599c24512eca1605f05c07f6d4ed967f5859e7
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/34edf6f49441be91b389050ac38943e17c12c2c8
CVE-2026-33605 (An unauthenticated attacker can crash the ManageSieve login
process by ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33605-managesieve-login-pre-auth-crash
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/14c28ca9c4aab11b1074c629bb744c4741434148
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/77bf1049ab8652b125e02ed00a15e1dd2e1feb98
CVE-2026-33604 (An attacker that can get Dovecot to relay a message, for
example throu ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33604-smtp-smuggling-via-missing-dot-stuffing-after-bare-carriage-return
NOTE: Fixed by:
https://github.com/dovecot/core/commit/e94a6c3cb984f9d1e5fe51714ea5015205d79fd1
@@ -37677,6 +38095,7 @@ CVE-2026-33604 (An attacker that can get Dovecot to
relay a message, for example
NOTE: Fixed by:
https://github.com/dovecot/core/commit/1da3e4dc88388bb818bcb73610489249e2458353
NOTE: Fixed by:
https://github.com/dovecot/core/commit/6e7860f07e11441d2a2e1c00f5f043d0a565b262
CVE-2026-33263 (When mail_max_userip_connections is set (default 10) and
reached, subm ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-33263-submission-login-panic-when-mail-max-userip-connections-is-reached-panic-epoll-ctl-del-8-failed-bad-file-descriptor
NOTE: Fixed by:
https://github.com/dovecot/core/commit/ff8d8059d7ba85375c6dc723fc1b7743114fbba4
@@ -37689,6 +38108,7 @@ CVE-2026-33263 (When mail_max_userip_connections is set
(default 10) and reached
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/33f5a95c0448e0d104f2cd7591e7f42c19b33199
NOTE: Fixed by:
https://github.com/dovecot/pigeonhole/commit/25e1e0adfa4ad44e3205fc8c62ca26a73cf6ee41
CVE-2026-27852 (An attacker that can send mail to a user can craft a message
whose hea ...)
+ {DSA-6526-1}
- dovecot 1:2.4.5+dfsg1-1 (bug #1146018)
NOTE:
https://documentation.open-xchange.com/dovecot/security/advisories/html/2026/oxdc-adv-2026-0003.html#cve-2026-27852-dos-by-sending-mail-with-bad-header
NOTE: Fixed by:
https://github.com/dovecot/core/commit/035fbfa155288ac037965e0e4700eb198ccbf39a
(2.4.3)
@@ -46573,7 +46993,7 @@ CVE-2026-66649 (Unauthenticated SQL Injection in
Directory Pro <= 2.5.8 versions
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66647 (Subscriber Broken Access Control in Homlisti <= 3.1.2
versions.)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-66616 (Unauthenticated Cross Site Scripting (XSS) in Form Maker by
10Web <= 1 ...)
+CVE-2026-66616 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-66615 (Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast
Publishe ...)
NOT-FOR-US: WordPress plugin or theme
@@ -52202,6 +52622,7 @@ CVE-2026-65832 (Deskflow is a keyboard and mouse
sharing app. Prior to continuou
CVE-2026-65822 (ERPNext is a free and open source Enterprise Resource Planning
tool. P ...)
NOT-FOR-US: ERPNext
CVE-2026-65640 (WordPress is vulnerable to a remote code execution
vulnerability via m ...)
+ {DSA-6525-1}
- wordpress 7.1+dfsg1-1 (bug #1144955)
NOTE: https://wordpress.org/news/2026/08/wordpress-7-0-4-release/
NOTE:
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-8vr3-7mxf-gx8w
@@ -63324,7 +63745,7 @@ CVE-2026-71193 (In OpenStack Designate before 22.0.1,
zone creation checks (_is_
NOTE: https://bugs.launchpad.net/designate/+bug/2160533
NOTE: https://security.openstack.org/ossa/OSSA-2026-034.html
CVE-2026-90616 (In Flatpak before 1.18.1, a malicious sandboxed app can obtain
arbitra ...)
- {DSA-6432-1}
+ {DSA-6524-1 DSA-6432-1}
- flatpak 1.18.1-1 (bug #1144130)
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-8688-9x26-hhxj
NOTE: Fixed by:
https://github.com/flatpak/flatpak/commit/478072972056d2d15c768c246f80abdf83cf0e5e
(1.18.1)
@@ -63384,7 +63805,7 @@ CVE-2026-96279 (A malicious OCI registry can hardlink
arbitrary host files into
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-9rww-v4mm-x4jg
NOTE: Fixed by:
https://github.com/flatpak/flatpak/commit/e6fa2f9b416ec382644694c8737dc8fbe7f07b89
(1.18.1)
CVE-2026-92162 [GHSA-v2gw-v9h5-9q4x]
- {DSA-6432-1}
+ {DSA-6524-1 DSA-6432-1}
- flatpak 1.18.1-1 (bug #1144130)
NOTE:
https://github.com/flatpak/flatpak/security/advisories/GHSA-v2gw-v9h5-9q4x
NOTE: Fixed by:
https://github.com/flatpak/flatpak/commit/19456b916842b079af833a86b9ab89c5db154b92
(1.18.1)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a81a53fffaba7424ada3c83e305416b37fe51e25
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a81a53fffaba7424ada3c83e305416b37fe51e25
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
