Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c5700a7f by Salvatore Bonaccorso at 2026-10-20T13:02:12+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-97627 (Hidden functionality issue exists in Multiple DVRs (Digital
Video Reco ...)
- TODO: check
+ NOT-FOR-US: Atsumi Electric
CVE-2026-96903 (The Easy Property Listings WordPress plugin before 3.5.27 does
not per ...)
NOT-FOR-US: WordPress plugin
CVE-2026-96902 (The Easy Property Listings WordPress plugin before 3.5.28 does
not res ...)
@@ -93,23 +93,23 @@ CVE-2026-84490 (This issue was addressed through improved
state management. This
CVE-2026-82166 (Dell Application Store, versions prior to 26.05.0.7, contain a
Missing ...)
NOT-FOR-US: Dell / EMC
CVE-2026-77938 (Letta through 0.16.8 contains an information disclosure
vulnerability ...)
- TODO: check
+ NOT-FOR-US: letta-ai letta
CVE-2026-77937 (Letta through 0.16.8 contains an authentication bypass
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: letta-ai letta
CVE-2026-77936 (Letta through 0.16.8 ships a compose.yaml that does not enable
LETTA_S ...)
- TODO: check
+ NOT-FOR-US: letta-ai letta
CVE-2026-77935 (Coze Studio through 0.5.1 contains an insecure direct object
reference ...)
- TODO: check
+ NOT-FOR-US: Coze Studio
CVE-2026-77934 (Coze Studio before 0.5.0 contains an insecure default
configuration th ...)
- TODO: check
+ NOT-FOR-US: Coze Studio
CVE-2026-77933 (DB-GPT through 0.8.2 contains a hardcoded credentials
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-77932 (DB-GPT through 0.8.2 contains an unauthenticated remote code
execution ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-77930 (EvoScientist 0.1.0 before 0.2.5 contains an approval bypass
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: EvoScientist
CVE-2026-77926 (Aix-DB 1.2.4 contains a remote code execution vulnerability
that allow ...)
- TODO: check
+ NOT-FOR-US: Aix-DB
CVE-2026-77684 (The Bluetooth Classic Hands-Free Profile HF role in
subsys/bluetooth/h ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-76788 (The OSDP Control Panel reply parser cp_decode_response() in
subsys/mgm ...)
@@ -119,7 +119,7 @@ CVE-2026-76787 (The UpdateHub firmware-over-the-air client
parses the CoAP probe
CVE-2026-75753 (Missing Authentication for a Critical Function in certain ASUS
routers ...)
NOT-FOR-US: ASUS
CVE-2026-75128 (Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call
API endp ...)
- TODO: check
+ NOT-FOR-US: Langchain-Chatchat
CVE-2026-71170 (Dell Application Store, versions prior to 26.05.0.7, contains
an Uncon ...)
NOT-FOR-US: Dell / EMC
CVE-2026-71169 (Dell Application Store, versions prior to 26.05.0.7, contain
an Incorr ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5700a7f4aba991118af6253648d6436200a29bd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5700a7f4aba991118af6253648d6436200a29bd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
