Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
eb522c0d by security tracker role at 2026-10-08T07:14:49+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,215 +1,215 @@
CVE-2026-97717 (CVE-2026-97717 is a vulnerability in the proxy sub-system of
Secure Ac ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97716 (CVE-2026-97716 is a vulnerability in the connection set up
sub-system ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97715 (CVE-2026-97715is a vulnerability in the client registration
process of ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97714 (CVE-2026-97714 is a is a vulnerability in the authentication
sub-syste ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97664
REJECTED
CVE-2026-94587 (A buffer overflow vulnerability exists in the WebTools
administrative ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94586 (A command injection vulnerability exists in the WebTools
administrativ ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94585 (An authentication bypass vulnerability exists in the web
management in ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94584 (A race condition and thread-safety vulnerability exists in the
web man ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94583 (A race condition vulnerability exists in the request
processing logic ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94582 (A memory buffer overflow vulnerability exists in the internal
diagnost ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94581 (An OS command injection vulnerability exists in the REST API
managemen ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94580 (An arbitrary file and directory deletion vulnerability exists
in the R ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94579 (An OS command injection vulnerability exists in the PAM
(Pluggable Aut ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94578 (Brocade Fabric OS versions before 10.0.1 contain an
authorization logi ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94577 (A privilege escalation vulnerability exists in the internal
Command-Li ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94576 (An authentication logic and privilege escalation vulnerability
exists ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94575 (A logic vulnerability in Brocade Fabric OS versions before
10.0.1 web ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94275 (The Track Orders for WooCommerce WordPress plugin before
1.2.7 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94258 (The SMS Alert WordPress plugin before 4.0.1 does not check
that the a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94246 (The Wallet System for WooCommerce WordPress plugin before
2.8.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94245 (The Wallet System for WooCommerce WordPress plugin before
2.8.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94244 (The Wallet System for WooCommerce WordPress plugin before
2.8.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94154 (The Aurora Heatmap plugin for WordPress is vulnerable to
Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92862 (The Android application "Ticket Ryutsu Center" improperly
handles cust ...)
TODO: check
CVE-2026-92861 (The Android application "Ticket Ryutsu Center" contains
hard-coded cre ...)
TODO: check
CVE-2026-89322 (Vault and Vault Enterprise did not consistently evaluate ACL
policies ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-87726 (Insufficient API bounds checking in phalFelica in NXP
NXPNfcRdLib RC66 ...)
TODO: check
CVE-2026-87688 (An input validation vulnerability exists in the security
certificate m ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87687 (An authorization and input validation vulnerability exists in
Brocade ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87686 (An authentication and access control bypass vulnerability
exists in th ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87685 (An arbitrary file manipulation vulnerability exists in the
WebTools ma ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87684 (A stack-based buffer overflow vulnerability exists in the SNMP
daemon ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87683 (Multiple stack-based buffer overflow vulnerabilities exist in
the REST ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87682 (Multiple OS Command Injection vulnerabilities exist in the
management ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87681 (An Access Control Bypass vulnerability exists in the
Role-Based Access ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87680 (A command injection vulnerability in the REST API management
interface ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87679 (When Brocade Fabric OS versions before 10.0.1 processes trunk
configur ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87678 (An input validation and output encoding vulnerability exists
in the we ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87677 (An OS command injection vulnerability exists in the account
management ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87676 (A stack-based buffer overflow vulnerability exists in the
security lib ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87675 (An OS command injection vulnerability exists in the
configuration mana ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87674 (A local privilege escalation vulnerability exists in the
system loggin ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87673 (An OS command injection vulnerability exists in maintenance
command-li ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87672 (An information disclosure vulnerability exists in the
SupportLink diag ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87671 (An out-of-bounds memory read vulnerability exists in the web
managemen ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87670 (An authorization logic vulnerability exists in the Brocade
Fabric OS v ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87669 (A missing authorization check in Brocade Fabric OS versions
before 10. ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87668 (A stack-based buffer overflow vulnerability exists in the
diagnostic e ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87667 (An argument injection vulnerability exists in the
configuration manage ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87666 (An OS command injection vulnerability exists in the time and
zone mana ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87665 (A stack-based buffer overflow vulnerability exists in the
Internet Key ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87664 (A session context forgery vulnerability exists in the web
management d ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87663 (An authentication bypass and command injection vulnerability
exists in ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87662 (Brocade Fabric versions before 9.2.2d and 10.0.0 through
10.0.0a1 hand ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87661 (Brocade Fabric OS versions before 9.2.2d and 10.0.0 through
10.0.0a1 d ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87660 (An improper file permission and missing authorization
vulnerability ex ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87659 (A critical authorization bypass vulnerability exists in the
Management ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87428 (In Brocade ASCG before 3.5.0, a local unauthorized user on the
ASCG VM ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87426 (An unauthenticated network-based attacker can query specific
internal ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87425 (An unauthenticated remote attacker can modify the TLS client
trust sto ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87424 (A vulnerability in the SupportLink API authentication
component of Bro ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-86828 (The BackWPup WordPress plugin before 5.7.7 does not properly
restrict ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86827 (The BackWPup WordPress plugin before 5.7.7 does not verify
that a req ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86826 (The BackWPup WordPress plugin before 5.7.7 does not properly
restrict ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85490 (When Brocade ASCG before 3.5.0 processes support bundle
archives inges ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85489 (An authentication flaw exists in the Brocade ASCG
administrative manag ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85488 (Brocade ASCG before 3.5.0 has a well-known Brocade default
password em ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85487 (A path traversal vulnerability exists in the HTTP service
component of ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85486 (Brocade ASCG before 3.5.0 improperly processes user input by
evaluatin ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85423 (A vulnerability has been identified in the data collection
service of ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85422 (A vulnerability in Brocade ASCG version before 3.5.0 could
allow an at ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85421 (A critical security vulnerability has been identified in
Brocade ASCG ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85097 (The Bricksforge plugin for WordPress is vulnerable to
unauthenticated ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82627 (The Uncanny Automator \u2013 AI + Automation for WordPress |
AI Agent, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76286 (In Splunk MCP Server versions below 1.2.1, Splunk MCP Server
could sen ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76285 (Improper Adherence to Coding Standards. Splunk addressed
multiple inte ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76284 (Improper Neutralization. Splunk addressed multiple internally
identifi ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76283 (Protection Mechanism Failure. Splunk addressed multiple
internally ide ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76282 (Improper Control of a Resource Through its Lifetime. Splunk
addressed ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76281 (Improper Access Control. Splunk addressed multiple internally
identifi ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76280 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76279 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76278 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and
10.0.10, a use ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76277 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76276 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and
10.0.10, a low ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76275 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76274 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and
10.0.10, a use ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76273 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76272 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76271 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and
10.0.10, a low ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76270 (In Splunk Enterprise versions below 10.4.3, a user that holds
a role w ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76269 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76268 (In Splunk Enterprise versions below 10.4.3 and 10.2.7, an
unauthentica ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76267 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and
10.0.10, a use ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76266 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76265 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76264 (In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10,
and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-5769 (A vulnerability in Brocade SANnav before 3.0.1 can have the
Brocade Fa ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-5049 (A path traversal vulnerability affects the The Zone Alias
Import flow ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-5048 (In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability
in var ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-5047 (A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0
prints encod ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-34499 (Use of hard-coded cryptographic key vulnerability in Johnson
Controls ...)
- TODO: check
+ NOT-FOR-US: Johnson Controls
CVE-2026-17609 (The Super Forms \u2013 Drag & Drop Form Builder plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17538 (The LatePoint - Appointment Booking & Reservation plugin for
WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17196 (The Super Forms \u2013 Drag & Drop Form Builder plugin for
WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107459 (The SecuShare Pro developed by Openfind has an OS Command
Injection vu ...)
TODO: check
CVE-2026-107450 (In Stump through 0.1.10, the updateSmartList and
deleteSmartList Graph ...)
@@ -231,7 +231,7 @@ CVE-2026-107354
CVE-2026-107353 (traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through
0.4.6, 0.5. ...)
TODO: check
CVE-2026-107352 (Missing authorization checks in Amazon Athena engine version
3 request ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-107315 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through
42.7.13 pa ...)
TODO: check
CVE-2026-107314 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through
42.7.13 e ...)
@@ -267,43 +267,43 @@ CVE-2026-107176 (A flaw was found in the
cluster-samples-operator. The RBAC Role
CVE-2026-107161 (A heap-based buffer overflow flaw was found in Cyrus SASL.
The add_to_ ...)
TODO: check
CVE-2026-105820 (Vault's ACL policy cache allowed namespace traversal when
policy names ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-105818 (Vault's PKI secrets engine ACME server did not restrict
certificate id ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-105816 (Vault and Vault Enterprise did not consistently verify that
stored plu ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-105260 (The Database Addon For WPForms ( wpforms entries ) WordPress
plugin b ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105198 (The Appointment Booking Plugin WordPress plugin before 5.7.3
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105197 (The Appointment Booking Plugin WordPress plugin before 5.6.5
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105196 (The Appointment Booking Plugin WordPress plugin before 5.6.9
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105195 (The Booking Calendar WordPress plugin before 11.8.3 does not
adequatel ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105194 (The Easy Digital Downloads WordPress plugin before 3.7.1
does not res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105193 (The Booking Calendar WordPress plugin before 11.8 does not
generate it ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104646 (The Image Photo Gallery Final Tiles Grid WordPress plugin
before 3.6.1 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104645 (The Image Photo Gallery Final Tiles Grid WordPress plugin
before 3.6.1 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103692 (The Frontend Dashboard WordPress plugin before 3.0.5 does not
perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103646 (The Ultimate Multisite WordPress plugin before 2.17.0 does
not requir ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103309 (The GPTranslate WordPress plugin before 2.34.14 does not
properly res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102488 (In affected versions, Octopus Server incorrectly evaluates
multiple sc ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2024-8122 (The WSO2 Identity Server fails to enforce a default expiry time
for SM ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2023-5649 (An Improper Input Validation vulnerability for the registered
case cre ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2023-5648 (In Brocade ASCG before Brocade ASCG v3.0, several
security-related HTT ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2017-20283 (NXP MQX Classic before 5.0 contains an out-of-bounds write
vulnerabili ...)
TODO: check
CVE-2026-84790
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb522c0dbab38554fe3426dcd8605e771938e408
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb522c0dbab38554fe3426dcd8605e771938e408
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
