Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dc2cfc76 by security tracker role at 2026-10-01T07:14:15+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,67 +1,67 @@
CVE-2026-96561 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for
WordPress plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96255 (The Payments for Hubtel WordPress plugin before 1.0.2 does not
prevent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96200 (The Payments for Hubtel WordPress plugin before 1.0.2 does not
verify ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96173 (The Payments for Hubtel WordPress plugin before 1.0.2 does not
verify ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93495 (Improper initialization in an ASUS certain motherboard allows
an physi ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-92966 (The The Appointment Booking Plugin \u2013 LatePoint | Calendar
& Sched ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92548 (The WP Popular Posts plugin for WordPress is vulnerable to
Sensitive I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92537 (The Newsletter \u2013 Send awesome emails from WordPress
plugin for Wo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92412 (The Five Star Restaurant Reviews WordPress plugin before
2.3.14 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92245 (The Simply Schedule Appointments plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92173 (Prior to v74.0.0.878.1682 of Meta Horizon OS,
MediaSyncJobReceiver cou ...)
TODO: check
CVE-2026-92172 (Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService
could be ...)
TODO: check
CVE-2026-91109 (The Simply Schedule Appointments plugin for WordPress is
vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-90974 (The WP Fusion Lite WordPress plugin before 3.48.0 does not
require au ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-90972 (The WP Fusion Lite WordPress plugin before 3.48.0 does not
perform a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89296 (The Pro Like Button WordPress plugin before 2.0 does not
properly sani ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88999 (The Redux Framework plugin for WordPress is vulnerable to
authorizatio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87973 (The If-So Dynamic Content WordPress plugin before 1.10.2 does
not san ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87970 (The If-So Dynamic Content WordPress plugin before 1.10.2 does
not esc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86610 (The Download Manager WordPress plugin before 3.3.71 does not
sufficien ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85679 (The Extendify plugin for WordPress is vulnerable to Stored
Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82829 (Hitachi Coding Software Suite contains a vulnerability related
to Hidd ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82828 (Hitachi Coding Software Suite contains an Incorrect
Authorization vuln ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82827 (Hitachi Coding Software Suite contains a vulnerability related
to Use ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82826 (Hitachi Coding Software Suite contains a vulnerability related
to the ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82825 (Hitachi Coding Software Suite contains a vulnerability related
to Miss ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82824 (Hitachi Coding Software Suite contains a vulnerability related
to Path ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-81809 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does
not prope ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81739 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does
not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-80276 (Comelit Multi-User Gateway for VIP System (model 1456B)
firmware versi ...)
TODO: check
CVE-2026-80275 (Comelit Multi-User Gateway for VIP System (model 1456B)
firmware versi ...)
TODO: check
CVE-2026-78210 (In affected versions of Octopus Server, users with certain
scoped perm ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-76147 (A path traversal (ZIP Slip) vulnerability caused by
insufficient autho ...)
TODO: check
CVE-2026-76146 (An OS command injection vulnerability in Genian SSL PNS allows
an atta ...)
@@ -75,7 +75,7 @@ CVE-2026-76143 (A missing authorization vulnerability in
Genian SSL PNS allows a
CVE-2026-76142 (Insufficient authentication and access control on the
internal-only IP ...)
TODO: check
CVE-2026-67075 (HCL Digital Experience is affected by improper input
sanitation. This ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-51872 (Devika v1.0 is vulnerable to Code Injection via the
Runner.run_code fu ...)
TODO: check
CVE-2026-51871 (Devika v1.0 is vulnerable to Code Injection in the
Runner.execute func ...)
@@ -115,13 +115,13 @@ CVE-2026-51568 (modelscope Agentscope v1.0.18-v1.0.0 is
vulnerable to Path Trave
CVE-2026-47096 (AJA HELO Plus firmware before 2.1.7 contains a stored
cross-site scrip ...)
TODO: check
CVE-2026-19253 (The Cache Enabler WordPress plugin before 1.8.17 does not
validate a U ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14157 (Use of an Externally Controlled Format String in the ASUS
Router modul ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-13313 (An Active Debug Code vulnerability in certain ASUS router
models allow ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-12241 (The Advanced Woo Labels \u2013 Product Labels & Badges for
WooCommerce ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103641 (A flaw was found in GEGL. The Radiance HDR loader reads past
the end o ...)
TODO: check
CVE-2026-103592 (simple-php-router through 5.4.1.7 contains an IP restriction
bypass vu ...)
@@ -141,13 +141,13 @@ CVE-2026-103585 (Improper neutralization of
Script-Related HTML tags in a web pa
CVE-2026-103584 (Improper neutralization of Script-Related HTML tags in a web
page (bas ...)
TODO: check
CVE-2026-103548 (Improperly stored passwords in the config file in Itron MV-90
xi 3.0 a ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2026-103547 (In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before
errata 021, d ...)
TODO: check
CVE-2026-103544 (A vulnerability was found in datadrivenconstruction
OpenConstructionER ...)
TODO: check
CVE-2026-103543 (A vulnerability has been found in itsourcecode Leave
Management System ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-103542 (A flaw has been found in formtools.org Form Tools up to
3.1.1. Impacte ...)
TODO: check
CVE-2026-103541 (A vulnerability was detected in formtools.org Form Tools up
to 3.1.1. ...)
@@ -323,21 +323,21 @@ CVE-2026-101887 (BlueALSA (bluez-alsa/bluealsad) contains
a division-by-zero vul
CVE-2026-101885 (ZeroClaw versions before 0.8.5 built with plugins-wasm
feature contain ...)
TODO: check
CVE-2026-101884 (OpenClaw Windows Node before 2026.7.1 contains an incomplete
environme ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101883 (OpenClaw Windows Node through 2026.9.4 contains a server-side
request ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101882 (OpenClaw Windows Node before 2026.7.1 contains an incomplete
validatio ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101881 (OpenClaw Windows Node before 2026.7.1 contains an allocation
of resour ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101880 (OpenClaw Windows Node before 2026.7.1 contains an incorrect
authorizat ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101879 (OpenClaw Windows Node before 2026.7.1-3 contains a missing
authorizati ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101148 (The BackupSheep WordPress Backup Plugin WordPress plugin
through 1.8 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101147 (The Featured Image from URL (FIFU) WordPress plugin before
6.0.8, Feat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-41753 (The object name of a dynamically created BACnet File Object is
interpr ...)
TODO: check
CVE-2024-58387 (Inspur Haiyue HCM Cloud contains an arbitrary file read
vulnerability ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc2cfc769fe7a8fc100a67ff94e7d8dfb32e4154
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc2cfc769fe7a8fc100a67ff94e7d8dfb32e4154
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
