Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e0016974 by Salvatore Bonaccorso at 2026-10-09T10:29:47+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -254,9 +254,9 @@ CVE-2026-19491 (IBM Security Verify Access 10.0 through
10.0.9.2 and IBM Verify
CVE-2026-19482 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
NOT-FOR-US: IBM
CVE-2026-19218 (Weak Password Recovery Mechanism for Forgotten Password
vulnerability ...)
- TODO: check
+ NOT-FOR-US: MyRezzta
CVE-2026-19083 (Authorization bypass through User-Controlled key vulnerability
in AKIN ...)
- TODO: check
+ NOT-FOR-US: OctoCloud
CVE-2026-18740 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
NOT-FOR-US: IBM
CVE-2026-17189 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
@@ -348,9 +348,9 @@ CVE-2026-13258 (IBM DataPower Gateway 10.5.0.0 through
10.5.0.22, 10.6.1 through
CVE-2026-13257 (IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1
through 10.6. ...)
NOT-FOR-US: IBM
CVE-2026-12859 (Missing Authorization vulnerability in Caz Informatics
Services Trade ...)
- TODO: check
+ NOT-FOR-US: Advancity ALMS Cloud
CVE-2026-12260 (SQL injection in the NetBoard CRM demo platform; specifically,
the vul ...)
- TODO: check
+ NOT-FOR-US: NetBoard CRM
CVE-2026-12109 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
NOT-FOR-US: IBM
CVE-2026-12091 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
@@ -364,19 +364,19 @@ CVE-2026-11930 (IBM Security Verify Access 10.0 through
10.0.9.2 and IBM Verify
CVE-2026-11888 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM
Verify Identi ...)
NOT-FOR-US: IBM
CVE-2026-11318 (Deskin through 3.3.4.3 contains a privilege escalation
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Deskin
CVE-2026-10631 (An authorization bypass in the EWS FindItem handler of Zimbra
Collabor ...)
NOT-FOR-US: Zimbra
CVE-2026-107914 (Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1
doesn't suffici ...)
TODO: check
CVE-2026-107911 (A type confusion vulnerability in the _read_flags function
(src/comman ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-107910 (An improper authentication vulnerability in the
is_authenticated funct ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-107909 (A heap-based out-of-bounds write in the ws_read_frame
function (src/bo ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-107908 (A heap-based out-of-bounds write in the BoltReadHandler
function (src/ ...)
- TODO: check
+ NOT-FOR-US: FalkorDB
CVE-2026-107889 (A flaw was found in the login theme rendering component of
Keycloak. T ...)
TODO: check
CVE-2026-107885 (OpenPrinting CUPS through 2.4.20 contains a
resource-exhaustion vulner ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e00169749d6eb3f02c3c20c475819f6286837186
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e00169749d6eb3f02c3c20c475819f6286837186
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
