Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd62bfdf by security tracker role at 2026-10-09T19:15:13+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,25 +1,25 @@
CVE-2026-97791 (In Apache CXF, STSTokenValidator checks whether a SAML
assertion is si ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-97468 (Apache CXF's STSTokenValidator and Security Token Service
(STS) cached ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-97075 (Missing Authorization vulnerability in WP Media WP Rocket
wp-rocket al ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96809 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96761 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96671 (Cross-Site Request Forgery (CSRF) vulnerability in fifu.app
Featured I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96607 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96553 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96539 (Incorrect Privilege Assignment vulnerability in Ultimate
Member Ultima ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96518 (Missing Authorization vulnerability in properfraction
ProfilePress wp- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96461 (Missing Authorization vulnerability in TMS Amelia
ameliabooking allows ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96396 (The Affinity by Canva application for macOS before 3.3.1
(October 2026 ...)
TODO: check
CVE-2026-96395 (The Affinity by Canva app for macOS before 3.3.1 (October 2026
release ...)
@@ -29,105 +29,105 @@ CVE-2026-96394 (The Affinity by Canva application for
macOS before 3.3.1 (Octobe
CVE-2026-96393 (The Affinity by Canva app before 3.3.1 (October 2026 release)
did not ...)
TODO: check
CVE-2026-96337 (Missing Authorization vulnerability in properfraction
ProfilePress wp- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96336 (Authentication Bypass by Spoofing vulnerability in WPMU DEV
Forminator ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96334 (Missing Authorization vulnerability in ThemeGrill User
Registration us ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96333 (Authentication Bypass by Spoofing vulnerability in Liquid Web
/ Stella ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96332 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96331 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96330 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96329 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96328 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to
release ...)
TODO: check
CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95608 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95607 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95599 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95598 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95597 (Missing Authorization vulnerability in codemstory
\uc6cc\ub4dc\ud504\u ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95596 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95591 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95589 (Missing Authorization vulnerability in Magepeople inc.
Deposits and Pa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94668 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94667 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94666 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94665 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94664 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94663 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94661 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94641 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94632 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94568 (Deserialization of Untrusted Data vulnerability in WP Hosting
AS Pay w ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94503 (Unrestricted Upload of File with Dangerous Type vulnerability
in PX-la ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94415 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94170 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94167 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94166 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94161 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94159 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94158 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94067 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94066 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94065 (Deserialization of Untrusted Data vulnerability in
BuddhaThemes ColorF ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94064 (Deserialization of Untrusted Data vulnerability in
BuddhaThemes Neo | ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94063 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94062 (Improper Control of Filename for Include/Require Statement in
PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94061 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94060 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94059 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94058 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-93947 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-92085 (Improper neutralization of input during web page generation
('cross-si ...)
TODO: check
CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat
Health Facili ...)
@@ -135,13 +135,13 @@ CVE-2026-90983 (Use of Client-Side authentication
vulnerability in Hayat Health
CVE-2026-8374 (Misuse and misconfiguration in Bluetooth communication in
SwitchBot Do ...)
TODO: check
CVE-2026-89235 (The Testimonials by BestWebSoft WordPress plugin through 1.0.8
does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87846 (The Shipping for Nova Poshta WordPress plugin through 1.19.8
does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86851 (The Livees Checkout WordPress plugin through 7.0.2 does not
perform an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86463 (Apache CXF's FIQL query parser has a vulnerability in how it
searches ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-86405 (Improper verification of cryptographic signature vulnerability
in Sipa ...)
TODO: check
CVE-2026-85531 (Improper verification of cryptographic signature vulnerability
in Sipa ...)
@@ -149,13 +149,13 @@ CVE-2026-85531 (Improper verification of cryptographic
signature vulnerability i
CVE-2026-85479 (The STTP-based data publisher on openPDC accepts network
connections w ...)
TODO: check
CVE-2026-85348 (The GDPR Data Request Form WordPress plugin through 1.7.1 does
not hav ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84224 (The Kirki WordPress plugin before 6.3.2 does not validate the
host of ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84220 (The Kirki WordPress plugin before 6.3.2 does not prevent
shortcodes he ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-79650 (Apache CXF\u2019s OIDC relying-party component could redirect
users to ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-79363 (Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting
(XSS) vul ...)
TODO: check
CVE-2026-78835 (Rocket Software Rocket Remote Desktop 18.0.8583.1 is
vulnerable to Ins ...)
@@ -165,45 +165,45 @@ CVE-2026-78796 (An issue in Netcore B11 Enterprise-level
full Gigabit 9-port sho
CVE-2026-78795 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port
shop wire ...)
TODO: check
CVE-2026-78384 (CompressionUtils.inflate() decompressed attacker-controlled
DEFLATE da ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78340 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78339 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78027 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78026 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78025 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78024 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78023 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78022 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78021 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78020 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78019 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78018 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78017 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78016 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78015 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78013 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-76779 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-76769 (Dell Secure Connect Gateway (SCG) Policy Manager, versions
prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-75597 (pyLoad is a free and open-source download manager written in
Python. P ...)
TODO: check
CVE-2026-75353 (OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in
the ser ...)
@@ -225,39 +225,39 @@ CVE-2026-75346 (An out-of-bounds read vulnerability
exists in EIPStackGroup OpEN
CVE-2026-75345 (OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read
in the u ...)
TODO: check
CVE-2026-73179 (Improper enforcement of single-use authorization code
semantics in the ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-71884 (In Bouncy Castle for Java LTS before 2.73.13, the native
one-shot CTR ...)
- TODO: check
+ NOT-FOR-US: Bouncycastle components not packaged in Debian
CVE-2026-71575 (The max_age authentication-freshness check in
OidcClientCodeRequestFil ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-62049 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62042 (Missing Authorization vulnerability in unFocus Projects
Scripts n Styl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62041 (Missing Authorization vulnerability in Ashok Dudhat WP Event
Manager w ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62040 (Missing Authorization vulnerability in DEV Institute Restrict
User Acc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62039 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62036 (Exposure of Sensitive System Information to an Unauthorized
Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62029 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62028 (Missing Authorization vulnerability in bPlugins Before After
Image Com ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62026 (Cross-Site Request Forgery (CSRF) vulnerability in
MIGHTYminnow Dashbo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-55797 (Argo CD is a declarative, GitOps continuous delivery tool for
Kubernet ...)
- TODO: check
+ NOT-FOR-US: Argo CD
CVE-2026-4264 (Reflected Cross-Site Scripting (XSS) on the BeeTienda
e-commerce platf ...)
TODO: check
CVE-2026-48484 (pyLoad is a free and open-source download manager written in
Python. P ...)
TODO: check
CVE-2026-42695 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-39779 (Missing Authorization vulnerability in Asgaros Asgaros Forum
asgaros-f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-39460 (Usernames and passwords, including the default factory
credentials, ar ...)
TODO: check
CVE-2026-39453 (Navigating to a certain URL on the switch\u2019s web server
causes the ...)
@@ -273,15 +273,15 @@ CVE-2026-29797 (No authentication is required when
updating firmware or bootload
CVE-2026-28745 (Usernames and passwords, including the default credentials,
are stored ...)
TODO: check
CVE-2026-19575 (The user-mode verification handler for the device_deinit()
system call ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19574 (The ARM64 MMU back-end allocated address space identifiers
(ASIDs) for ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19571 (The ITE IT8xxx2 SHI host-command backend
(subsys/mgmt/ec_host_cmd/back ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19570 (The LE Audio Broadcast Sink in
subsys/bluetooth/audio/bap_broadcast_si ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19569 (dynamic_object_create() in kernel/userspace/userspace.c
computed the b ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-15340 (lwIP SMTP client does not check the size of inputs,
potentially allowi ...)
TODO: check
CVE-2026-108160 (AstronRPA through 1.1.6 contains a download of code without
integrity ...)
@@ -311,7 +311,7 @@ CVE-2026-108110 (MOVO through 0.2.3 contains an
authorization bypass vulnerabili
CVE-2026-108109 (PHPNuxBill through 2025.3.20 contains an account takeover
vulnerabilit ...)
TODO: check
CVE-2026-108108 (PHPNuxBill through 2025.3.20 contains an authentication
bypass vulnera ...)
- TODO: check
+ NOT-FOR-US: MikroTik
CVE-2026-108107 (PHPNuxBill through 2025.3.20 contains an unauthenticated SQL
injection ...)
TODO: check
CVE-2026-108106 (Xerial snappy-java before 1.1.10.9 contains an unbounded
memory alloca ...)
@@ -329,17 +329,17 @@ CVE-2026-108101 (HortusFox (hortusfox-web) through 6.3
contains an unrestricted
CVE-2026-108100 (HortusFox (hortusfox-web) before 6.2 contains an SQL
injection vulnera ...)
TODO: check
CVE-2026-108096 (Improper authorization in the query resolvers generated by
@aws-amplif ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-108093 (A flaw was found in GIMP. The XCF loader processes
image-simulation-in ...)
TODO: check
CVE-2026-108063 (A flaw was found in libhangul. When parsing Hanja dictionary
files, th ...)
TODO: check
CVE-2026-108039 (By default, StaxUtils placed no limit on the total number of
elements ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107938 (In Apache CXF, the Netty-based HTTP client transport
(cxf-rt-transport ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107937 (In Apache CXF, the parser for multipart/MTOM attachment part
headers d ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107935 (A path traversal vulnerability was found in gvproxy, the
network forwa ...)
TODO: check
CVE-2026-107841 (pacioli provides least-privilege governance and a governed
agent broke ...)
@@ -411,31 +411,31 @@ CVE-2026-107803 (ProcessMaker is an open source workflow
management software sui
CVE-2026-107785 (Crux Agent from 1.9.0 before 2.0.3 uses the full SKA
bilocation key as ...)
TODO: check
CVE-2026-107783 (Insertion of sensitive information into log file in AWS Tools
for Powe ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-107655 (A flaw was found in CUPS. When processing embedded job ticket
comments ...)
TODO: check
CVE-2026-107419 (Missing Authorization vulnerability in Cool Plugins AI
Translation for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106602 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106601 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106581 (Before 4.92.0, Docker Desktop for Windows did not verify the
signature ...)
- TODO: check
+ NOT-FOR-US: Docker products not packaged in Debian
CVE-2026-106155 (In Progress\xae Telerik\xae Report Server prior to version
12.2.26.100 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-106145 (In Progress\xae Telerik\xae Report Server prior to version
12.2.26.100 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-105883 (Missing Authorization vulnerability in ThemeHunk Th Shop
Mania th-shop ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105877 (Insertion of Sensitive Information Into Sent Data
vulnerability in Qua ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105872 (Deserialization of Untrusted Data vulnerability in mklacroix
Product C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105870 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105318 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105281 (The internal data publisher on openPDC accepts network
connections wit ...)
TODO: check
CVE-2026-105278 (The published Docker image for openPDC includes a fixed
administrative ...)
@@ -445,7 +445,7 @@ CVE-2026-104635 (Uncontrolled Recursion vulnerability in
Protobuf.JSON.Decode in
CVE-2026-104629 (A component loading mechanism in openPDC and openHistorian
will constr ...)
TODO: check
CVE-2026-104392 (Deserialization of Untrusted Data vulnerability in
ExpressTech Quiz An ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-104117 (A missing authorization check in the illumos IP management
daemon (ipm ...)
TODO: check
CVE-2026-104116 (A missing authorization check in the illumos zones statistics
daemon ( ...)
@@ -469,11 +469,11 @@ CVE-2026-104081 (KodExplorer before 4.55 contains a path
traversal vulnerability
CVE-2026-104079 (Envira Gallery Lite before 1.16.2 contains a missing
authorization vul ...)
TODO: check
CVE-2026-103413 (Improper input validation vulnerability in Apache Camel
Karavan. Wh ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-103412 (Improper limitation of a pathname to a restricted directory
('path tra ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-103329 (The Super Payments WordPress plugin before 1.43.1 does not
properly ve ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103220 (The Affinity by Canva application before 3.3.1 (October 2026
release) ...)
TODO: check
CVE-2026-102916 (A reachable assertion in the illumos bhyve instruction
emulator allows ...)
@@ -489,11 +489,11 @@ CVE-2026-101022 (A Modbus connection feature on openPDC
accepts a caller-specifi
CVE-2026-100730 (A service console interface on openPDC and openHistorian
deserializes ...)
TODO: check
CVE-2026-100227 (Improper Verification of Cryptographic Signature
vulnerability in Apac ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2025-61560 (A race condition vulnerability in the SessionManager of CNCF:
Cloud Na ...)
- TODO: check
+ NOT-FOR-US: Argo CD
CVE-2025-14123 (The Redux Framework plugin for WordPress is vulnerable to
privilege es ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2016-20098 (Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14
contains a ...)
TODO: check
CVE-2026-98384 (In the Linux kernel, the following vulnerability has been
resolved: b ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd62bfdff33f0397d8294f749232922c7b4d0c20
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd62bfdff33f0397d8294f749232922c7b4d0c20
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
