Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
870a1456 by Salvatore Bonaccorso at 2026-10-07T23:06:47+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -49,61 +49,61 @@ CVE-2026-78243 (Apache YuniKorn 1.8.0 and later, if
configured with the LDAP gro
CVE-2026-76501 (A vulnerability in the Segment Routing over IPv6 (SRv6)
Operation, Adm ...)
NOT-FOR-US: Cisco
CVE-2026-76500 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76499 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76498 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76488 (A vulnerability in the export policies functionality of Cisco
Applicat ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76486 (A vulnerability in the VXLAN Operation, Administration, and
Maintenanc ...)
NOT-FOR-US: Cisco
CVE-2026-76485 (A vulnerability in the VXLAN Operation, Administration, and
Maintenanc ...)
NOT-FOR-US: Cisco
CVE-2026-76484 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76483 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76482 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76480 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76472 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76471 (A vulnerability in the NX-API feature of Cisco NX-OS Software
could al ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76470 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76469 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76468 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76467 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76465 (A vulnerability in the MPLS Operation, Administration, and
Maintenance ...)
NOT-FOR-US: Cisco
CVE-2026-76464 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76463 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76459 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76458 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76457 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76456 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76455 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76454 (A vulnerability in the Cisco Smart Licensing Utility API of
Cisco Lice ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76453 (As part of Cisco's ongoing commitment to proactive security
and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76452 (A vulnerability in the web-based management interface of Cisco
License ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76437 (A vulnerability in the web-based user interface of Cisco
License On-Pr ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-62253 (Homer is open source telecom observability software. Prior to
version ...)
NOT-FOR-US: Homer
CVE-2026-62252 (Homer is open source telecom observability software. Prior to
version ...)
@@ -145,23 +145,23 @@ CVE-2026-42710 (Improper Neutralization of Special
Elements used in an SQL Comma
CVE-2026-42708 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42532 (A path traversal vulnerability exists in the EmailSheet
extract_parts ...)
- TODO: check
+ NOT-FOR-US: VisiData
CVE-2026-41958 (A path traversal vulnerability exists in the unzip_http
RemoteZipFile ...)
- TODO: check
+ NOT-FOR-US: VisiData
CVE-2026-33586 (Authenticated users are able to manipulate both the SMTP
envelope \u20 ...)
- TODO: check
+ NOT-FOR-US: OVH infrastructure
CVE-2026-27434 (Missing Authorization vulnerability in sc Internet Vivoo WP
Rentals wp ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-20362 (A vulnerability in the web-based management interface of Cisco
Finesse ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20328 (A vulnerability in the web-based management interface of Cisco
License ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20321 (A vulnerability in the web-based management API for Cisco
Application ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20173 (A vulnerability in Cisco NX-OS Software could allow an
unauthenticated ...)
NOT-FOR-US: Cisco
CVE-2026-20038 (A vulnerability in the endpoint group (EPG) contract
functionality of ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20032 (A vulnerability in the Python interpreter of Cisco NX-OS
Software coul ...)
NOT-FOR-US: Cisco
CVE-2026-19186 (ieee802154_decipher_data_frame() in
subsys/net/l2/ieee802154/ieee80215 ...)
@@ -175,45 +175,45 @@ CVE-2026-107278 (MISP contains a validation flaw in its
object synchronization l
CVE-2026-107276 (MISP contains a race condition in the email-based one-time
password (O ...)
TODO: check
CVE-2026-107273 (Gophish 0.11.0 through 0.12.1 contains a server-side request
forgery v ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107272 (Gophish through 0.12.1 contains stored and reflected
cross-site script ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107271 (Gophish through 0.12.1 contains a rate limit bypass
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107270 (Gophish through 0.12.1 contains an insecure direct object
reference vu ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107269 (Gophish through 0.12.1 contains a timing discrepancy
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107225 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107224 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107223 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107222 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107221 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107220 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107219 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107218 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107217 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107216 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107215 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107214 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107213 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107212 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107211 (Excelize is a Go language library for reading and writing
Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107210 (ImageMagick is free and open-source software used for editing
and mani ...)
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
@@ -230,17 +230,17 @@ CVE-2026-107208 (ImageMagick is free and open-source
software used for editing a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/907b74817836b4f88e7453f0e95c849a1c5311aa
(7.1.2-30)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/6ba345f88a14fcce35c723c231914ae054c4281a
(6.9.13-55)
CVE-2026-107207 (LMCache through 0.5.5 contains a server-side request forgery
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107206 (LMCache through 0.5.5 contains a missing authentication
vulnerability ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107205 (LMCache through 0.5.5 contains a missing authentication
vulnerability ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107204 (LMCache through 0.5.5 contains an unauthenticated remote code
executio ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107202 (A command injection vulnerability exists in the h-ui (version
v0.0.25 ...)
- TODO: check
+ NOT-FOR-US: h-ui
CVE-2026-107194 (Sungrow iSolarCloud before 2026 allows authentication bypass
and accou ...)
- TODO: check
+ NOT-FOR-US: Sungrow iSolarCloud
CVE-2026-107183 (llama.cpp before b11393 contains a use-after-free and double
free vuln ...)
TODO: check
CVE-2026-107181 (Telegram Desktop before 7.2.9 contains an IPC
record-separator injecti ...)
@@ -248,7 +248,7 @@ CVE-2026-107181 (Telegram Desktop before 7.2.9 contains an
IPC record-separator
CVE-2026-107180 (On MISP instances configured to require TOTP enrolment
(Security.otp_r ...)
TODO: check
CVE-2026-107177 (Express Gateway through 1.16.11 contains a hardcoded
cryptographic key ...)
- TODO: check
+ NOT-FOR-US: Express Gateway
CVE-2026-107175 (MISP contains a defect in its event save workflow that
prevents the co ...)
TODO: check
CVE-2026-107174 (A flaw was found in source-to-image. When unpacking archive
files, the ...)
@@ -264,7 +264,7 @@ CVE-2026-107167 (A flaw was found in m17n-lib. A user
providing specially crafte
CVE-2026-107166 (A weakness has been identified in Open5GS up to 2.7.7. This
vulnerabil ...)
TODO: check
CVE-2026-107162 (Express Gateway through 1.16.11 contains an authentication
bypass vuln ...)
- TODO: check
+ NOT-FOR-US: Express Gateway
CVE-2026-107159 (MiniUPnPd through 2.3.11 built with --strict contains a
divide-by-zero ...)
TODO: check
CVE-2026-107151 (Missing authentication has been found in remote-execution
task updates ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870a1456298115af1bf71ffdd5b3f7aee0126e75
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870a1456298115af1bf71ffdd5b3f7aee0126e75
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
