Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4e2643e8 by Salvatore Bonaccorso at 2026-09-29T08:37:58+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -177,7 +177,7 @@ CVE-2026-86102 (An OS command injection vulnerability in
the WatchGuard AP inter
CVE-2026-85134 (Unrestricted upload of file with dangerous type vulnerability
in Bimse ...)
NOT-FOR-US: eBA Plus Document and Workflow Management System:
CVE-2026-84894 (In moxygen before commit 004123dd24c3,
MoQSession::dataStreamReadLoop ...)
- TODO: check
+ NOT-FOR-US: moxygen
CVE-2026-82969 (Improper neutralization of input during web page generation
('cross-si ...)
NOT-FOR-US: eBA Plus Document and Workflow Management System:
CVE-2026-82936 (mH-DEVELOPER smart home module is vulnerable to Denial of
Service due ...)
@@ -287,19 +287,19 @@ CVE-2026-52749 (The Kaon AR2140X router improperly issues
session cookies in res
CVE-2026-52748 (The Kaon AR2140X router contains a vulnerability where the
backup func ...)
NOT-FOR-US: Kaon
CVE-2026-4556 (Exam4 is affected by a local privilege escalation vulnerability
in the ...)
- TODO: check
+ NOT-FOR-US: Exam4
CVE-2026-49994 (Bluehood monitors local bluetooth activity. Prior to version
0.7.1, wh ...)
NOT-FOR-US: Bluehood
CVE-2026-48100 (Payy is an Ethereum L2 zk-rollup for privacy preserving and
regulatory ...)
NOT-FOR-US: Payy
CVE-2026-45562 (FreePBX is an open source IP PBX. Prior to versions 16.0.4 and
17.0.6, ...)
- TODO: check
+ NOT-FOR-US: FreePBX
CVE-2026-19759 (An Incorrect Authorization vulnerabilityin the task
configuration in G ...)
- TODO: check
+ NOT-FOR-US: Google Cloud Application Integration
CVE-2026-19444 (A path traversal vulnerability was discovered in the
Kuberneteskubectl ...)
TODO: check
CVE-2026-18825 (An Origin Validation Error in the middleware of the
connect-xcors npm ...)
- TODO: check
+ NOT-FOR-US: connect-xcors npm package
CVE-2026-15953 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
NOT-FOR-US: ABB group
CVE-2026-15952 (Incorrect Permission Assignment for Critical Resource
vulnerability in ...)
@@ -307,7 +307,7 @@ CVE-2026-15952 (Incorrect Permission Assignment for
Critical Resource vulnerabil
CVE-2026-13018 (Insufficient validation of untrusted input in Codecs in Google
Chrome ...)
TODO: check
CVE-2026-12342 (This vulnerability impacts all versions of IdentityIQ and
allows an un ...)
- TODO: check
+ NOT-FOR-US: IdentityIQ
CVE-2026-12269 (Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a
Keepali ...)
NOT-FOR-US: Zoho
CVE-2026-12268 (ManageEngine DDI Central versions below 6201 are vulnerable
toPowerShe ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e2643e840ce4d46db71536ba6e162e813b86f18
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e2643e840ce4d46db71536ba6e162e813b86f18
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
