Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8260226b by Salvatore Bonaccorso at 2026-10-06T21:31:19+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9,15 +9,15 @@ CVE-2026-95594 (Unauthenticated Privilege Escalation in SMS
Alert Order Notifica
CVE-2026-95526 (Unauthenticated Broken Access Control in BEAR <= 1.2.2
versions.)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-95153 (An issue in Bludit CMS 3.22.0 allows a remote attacker to
obtain sensi ...)
- TODO: check
+ NOT-FOR-US: Bludit CMS
CVE-2026-95140 (kkFileView v5.0.0 through v5.0.2 contains a directory
traversal vulner ...)
- TODO: check
+ NOT-FOR-US: kkFileView
CVE-2026-95105 (Reliance on Obfuscation or Encryption of Security-Relevant
Inputs with ...)
- TODO: check
+ NOT-FOR-US: danielberkompas cloak
CVE-2026-94675 (Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro
Add On ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-94206 (Use of Password Hash With Insufficient Computational Effort
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: danielberkompas cloak
CVE-2026-91140 (An OS command injection vulnerability in the shell-based
temporary-fil ...)
NOT-FOR-US: Progress Software
CVE-2026-88252 (A flaw was found in sssd. A local user can cause a Denial of
Service ( ...)
@@ -30,15 +30,15 @@ CVE-2026-86361 (Dell System Update, versions prior to
2.3.0.0, contains an Incor
CVE-2026-86360 (Dell System Update, versions prior to 2.3.0.0, contains an
Improper Li ...)
NOT-FOR-US: Dell / EMC
CVE-2026-85523 (Improper neutralization of special elements used in an OS
command ('OS ...)
- TODO: check
+ NOT-FOR-US: SambaBox
CVE-2026-85153 (This vulnerability exists in the Schmooze app due to the use
of hardco ...)
- TODO: check
+ NOT-FOR-US: Schmooze app
CVE-2026-84854 (In the WibuKey driver for Windows below Version 6.72,
insufficient val ...)
- TODO: check
+ NOT-FOR-US: WibuKey driver for Windows
CVE-2026-83550 (A flaw was found in postgres-exporter. Due to the blank import
of `net ...)
TODO: check
CVE-2026-82924 (Improper Control of Interaction Frequency vulnerability in
Pusula Comm ...)
- TODO: check
+ NOT-FOR-US: Expert Mail
CVE-2026-82531 (Smarty before 4.5.8 and 5.x before 5.8.5 contains a code
injection vul ...)
TODO: check
CVE-2026-82162 (Dell Command | Configure (DCC), versions prior to 5.2.3.35,
contain an ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8260226ba8957a6f080249b8e51737e29bd9f26f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8260226ba8957a6f080249b8e51737e29bd9f26f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
