Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6e144113 by Salvatore Bonaccorso at 2026-10-06T10:02:34+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,7 +11,7 @@ CVE-2026-95263 (Feehi CMS 2.1.1 is vulnerable to Incorrect
Access Control. A low
CVE-2026-94299 (The elegro Crypto Payment WordPress plugin through 1.0.1 does
not requ ...)
NOT-FOR-US: WordPress plugin
CVE-2026-94293 (An unauthenticated remote attacker can modify Asset
Administration She ...)
- TODO: check
+ NOT-FOR-US: Murrelektronik GmbH
CVE-2026-94278 (The File Media Renamer WordPress plugin through 1.3 does not
verify th ...)
NOT-FOR-US: WordPress plugin
CVE-2026-94271 (The Deema Payment Gateway WordPress plugin through 1.1.2 does
not veri ...)
@@ -46,29 +46,29 @@ CVE-2026-86786 (The Slider Pro WordPress plugin through
1.0.0 does not perform a
CVE-2026-84900 (Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10)
could p ...)
NOT-FOR-US: HP
CVE-2026-82989 (There is an input injection in vCast exposed network services
in ViewS ...)
- TODO: check
+ NOT-FOR-US: ViewSonic ViewBoard
CVE-2026-82988 (There exists an arbitrary file download in vCast APK delivery
mechanis ...)
- TODO: check
+ NOT-FOR-US: ViewSonic ViewBoard
CVE-2026-78862 (An issue in Mercusys AC12 V2 allows a local attacker to
execute arbitr ...)
- TODO: check
+ NOT-FOR-US: Mercusys AC12 V2
CVE-2026-78861 (An issue in Mercusys AC12 V2 allows a local attacker to
execute arbitr ...)
- TODO: check
+ NOT-FOR-US: Mercusys AC12 V2
CVE-2026-78860 (An issue in Mercusys AC12 V2 allows a local attacker to
execute arbitr ...)
- TODO: check
+ NOT-FOR-US: Mercusys AC12 V2
CVE-2026-77226 (Camunda 7.24.0 before 7.24.15 contains an incorrect
authorization vuln ...)
- TODO: check
+ NOT-FOR-US: Camunda
CVE-2026-75962 (The Post SMTP \u2013 Complete Email Deliverability and SMTP
Solution w ...)
NOT-FOR-US: WordPress plugin
CVE-2026-71299 (A flaw was found in Maestro. Its REST API write endpoints were
registe ...)
- TODO: check
+ NOT-FOR-US: openshift-online/maestro
CVE-2026-71298 (A flaw was found in maestro. A remote attacker could exploit a
SQL inj ...)
- TODO: check
+ NOT-FOR-US: openshift-online/maestro
CVE-2026-71297 (A flaw was found in the maestro gRPC broker. This
vulnerability allows ...)
- TODO: check
+ NOT-FOR-US: openshift-online/maestro
CVE-2026-59358 (Improper authentication (CWE-287) in the OAuth token endpoint
in Cloud ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-59357 (Insufficient verification of data authenticity (CWE-345) in
the extern ...)
- TODO: check
+ NOT-FOR-US: Cloud Foundry
CVE-2026-57559 (Memory corruption while processing service requests.)
NOT-FOR-US: Qualcomm
CVE-2026-57555 (Memory Corruption when executing system service routines due
to improp ...)
@@ -130,17 +130,17 @@ CVE-2026-105782 (Scrapy is a high-level web crawling and
scraping framework for
CVE-2026-105778 (A vulnerability has been found in Tenda AC5
02.03.01.111_multi. Affect ...)
NOT-FOR-US: Tenda
CVE-2026-105776 (A flaw has been found in bhagya3929
Employee-Movement-Tracking-and-Mon ...)
- TODO: check
+ NOT-FOR-US: bhagya3929
Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL
CVE-2026-105775 (A security vulnerability has been detected in vllm-project
vLLM up to ...)
TODO: check
CVE-2026-105773 (Canimaan Software ClamXAV versions 3.3 - 3.11 contains a
local privile ...)
- TODO: check
+ NOT-FOR-US: Canimaan Software ClamXAV
CVE-2026-105768 (apko allows users to build and publish OCI container images
built from ...)
- TODO: check
+ NOT-FOR-US: apko
CVE-2026-105767 (Improper Neutralization of Special Elements used in an OS
Command in t ...)
- TODO: check
+ NOT-FOR-US: Chainguard
CVE-2026-105766 (Use of the backend-facing $scheme variable in the
trailing-slash direc ...)
- TODO: check
+ NOT-FOR-US: Chainguard
CVE-2026-105764 (Immich is a high-performance self-hosted photo and video
management so ...)
TODO: check
CVE-2026-105763 (Twenty is an open-source CRM (customer relationship
management) platfo ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e14411316cc9df7f006e981926a00062b1c6037
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e14411316cc9df7f006e981926a00062b1c6037
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
