Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
688f0f25 by Salvatore Bonaccorso at 2026-10-26T21:17:36+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -107,9 +107,9 @@ CVE-2026-71456 (Use of hard-coded cryptographic key
vulnerability in Johnson Con
CVE-2026-71455 (Cleartext storage of sensitive information in memory
vulnerability in ...)
NOT-FOR-US: Johnson Controls
CVE-2026-70388 (SOEM version 2.0.0 and earlier contains vulnerabilities where
a malici ...)
- TODO: check
+ NOT-FOR-US: SOEM
CVE-2026-70379 (When the vSolution Matrix feature is enabled, affected devices
may mak ...)
- TODO: check
+ NOT-FOR-US: vSolution Matrix
CVE-2026-65226
REJECTED
CVE-2026-65222
@@ -135,9 +135,9 @@ CVE-2026-65202
CVE-2026-65184 (The root-privileged `wsserver` terminal-bridge daemon builds a
shell c ...)
TODO: check
CVE-2026-59107 (A security vulnerability has been identified in the vSolution
Matrix f ...)
- TODO: check
+ NOT-FOR-US: vSolution Matrix
CVE-2026-59106 (A security vulnerability has been identified in the WolfProt
interface ...)
- TODO: check
+ NOT-FOR-US: WolfProt
CVE-2026-50096 (There is a reflected cross site scripting vulnerability in
Esri Portal ...)
NOT-FOR-US: Esri
CVE-2026-50095 (There is a stored cross site scripting issue in Esri ArcGIS
Server 11. ...)
@@ -147,7 +147,7 @@ CVE-2026-4316 (Reflected Cross-Site Scripting (XSS) in Gym
Management Software I
CVE-2026-3322 (Due to improper permission checks inLobster_pro, attackers are
able to ...)
TODO: check
CVE-2026-36698 (Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and
APS-B 2.10 ...)
- TODO: check
+ NOT-FOR-US: Xovis
CVE-2026-33522 (Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote,
unauthe ...)
NOT-FOR-US: Esri
CVE-2026-33521 (There is s denial of service vulnerability in Esri ArcGIS
Server versi ...)
@@ -155,13 +155,13 @@ CVE-2026-33521 (There is s denial of service
vulnerability in Esri ArcGIS Server
CVE-2026-33520 (There is a reflected cross site scripting vulnerability in
Esri Portal ...)
NOT-FOR-US: Esri
CVE-2026-31158 (SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka
softtradein ...)
- TODO: check
+ NOT-FOR-US: CRM SOFTTRADE Infotech
CVE-2026-19742 (The IPv6 stack derived the long-lived secret key used to
compute RFC 7 ...)
NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-116638 (The Windows Recovery Environment (WinRE) in Windows 10 and 11
may allo ...)
- TODO: check
+ NOT-FOR-US: Windows Recovery Environment (WinRE)
CVE-2026-116634 (OmniRoute 3.8.50 before 3.8.52 contains a missing
authentication vulne ...)
- TODO: check
+ NOT-FOR-US: OmniRoute
CVE-2026-116632 (A malicious web page could insert arbitrary text into the
FaceTime cal ...)
TODO: check
CVE-2026-116631 (A malicious web page could open a tel link in a window that
was showin ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/688f0f254895e2cef338b671370c2cf7b9f03bc6
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/688f0f254895e2cef338b671370c2cf7b9f03bc6
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
