Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d821bbdf by security tracker role at 2026-10-27T19:18:46+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,69 +1,69 @@
CVE-2026-94347 (PowerProtect Data Domain Virtual Edition, Feature Release
versions 7.7 ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-94346 (PowerProtect Data Domain Virtual Edition, Feature Release
versions 7.7 ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-93866 (An integer overflow vulnerability in the WebSocket connection
handling ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93865 (A missing authentication vulnerability in the Fireware OS
FireCluster ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93864 (A link following vulnerability in WatchGuard Fireware
OS\u2019s firewa ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93862 (An out-of-bounds read vulnerability in the FireCluster Sync
processing ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93857 (A stack-based buffer overflow vulnerability in Fireware OS's
SIP proxy ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93434 (An XPath injection vulnerability in WatchGuard Fireware OS's
SSH authe ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-92885 (The Qode Membership plugin for WordPress is vulnerable to
Authenticati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92546 (Authentication bypass by spoofing vulnerability in Keepnet
Labs Cybers ...)
TODO: check
CVE-2026-92377 (Improper access control in the Patch Management update
mechanism of Te ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92376 (Improper authentication in the inter-process communication
(IPC) mecha ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92375 (An improper access control vulnerability in the IPC
communication betw ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92374 (A time-of-check time-of-use (TOCTOU) race condition combined
with impr ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92372 (An out-of-bounds write vulnerability in the screen-image
decoder of Te ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-90732 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90731 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90730 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90729 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90728 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90727 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90726 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90725 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90465 (A missing authentication vulnerability in the FireCluster Sync
process ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-90464 (An external control of file path vulnerability in a WatchGuard
Firewar ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-90442 (A stack-based buffer overflow vulnerability in the Fireware OS
certd p ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-87897 (A SSRF vulnerability found that enables access to internal
Chrome Devt ...)
TODO: check
CVE-2026-87086 (Tanium addressed a denial of service vulnerability in
Provision.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-87085 (Tanium addressed a SQL injection vulnerability in Provision.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-86577 (Out-of-bounds Write Vulnerability in JP1 Products. This issue
affects ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-86576 (Heap-based Buffer Overflow Vulnerability in JP1 Products.
This issue ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-86575 (Stack-based Buffer Overflow Vulnerability in JP1 Products.
This issue ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-86574 (Heap-based Buffer Overflow Vulnerability in JP1/Base. This
issue affe ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-85299 (A Missing Authorization vulnerability in the
disks.createSnapshot and ...)
TODO: check
CVE-2026-82986 (The user in a group can bypass the group restriction set by an
adminis ...)
@@ -73,21 +73,21 @@ CVE-2026-82984 (When a team was configured as "visible to
everyone", the web UI
CVE-2026-82983 (The Tables app's share-listing endpoint (GET
/apps/tables/share/table/ ...)
TODO: check
CVE-2026-82332 (An improper authentication vulnerability in WatchGuard
Fireware OS's A ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-82122 (Stack-based Buffer Overflow Vulnerability in HiRDB. This
issue affec ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82121 (Origin Validation Error Vulnerability in HiRDB. This issue
affects H ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82120 (Heap-based Buffer Overflow Vulnerability in HiRDB. This
issue affect ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82119 (OS Command Injection Vulnerability in HiRDB. This issue
affects HiRD ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82118 (Stack-based Buffer Overflow Vulnerability in HiRDB. This
issue affec ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82117 (Authentication Bypass by Spoofing Vulnerability in HiRDB.
This issue ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82116 (Missing Authentication for Critical Function Vulnerability in
HiRDB. ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-78845 (Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter
Smart L ...)
TODO: check
CVE-2026-77173 (A user could create a docx or odt file with a # in the
filename with c ...)
@@ -99,43 +99,43 @@ CVE-2026-77171 (A public shared collective always allowed
recipients of the link
CVE-2026-77167 (Abusing the federated share endpoint, an attacker can write
arbitrary ...)
TODO: check
CVE-2026-76939 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job
Manageme ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76938 (Authentication Bypass Vulnerability in JP1/Automatic Job
Management Sy ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76937 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job
Manageme ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76936 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76935 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76934 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76933 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job
Manageme ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76932 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job
Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-68866 (PowerProtect Data Domain, Feature Release versions 7.7.1.0
through 8.7 ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-67400 (A missing token type check allowed to retrieve more additional
informa ...)
TODO: check
CVE-2026-65220 (A logic flaw in the BMC IPMI implementation may allow an
attacker to s ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65219 (A flaw in the BMC RAKP+ implementation may allow an attacker
to send a ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65213 (This issue may allow an IPMI authenticated administrator to
execute co ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65211 (This issue may allow an authenticated IPMI Administrator to
read and w ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65210 (This issue may allow an authenticated IPMI Administrator to
read arbit ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65151 (NVIDIA NeMo Agent Toolkit contains vulnerability where an
attacker cou ...)
TODO: check
CVE-2026-65145 (NVIDIA NeMo Agent Toolkit contains a vulnerability where a
attacker co ...)
TODO: check
CVE-2026-65120 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker
could c ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-65119 (NVIDIA TensorRT-LLM for any platform contains a vulnerability
in KvCac ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-57202 (Asterisk is an open source private branch exchange and
telephony toolk ...)
TODO: check
CVE-2026-57201 (Asterisk is an open source private branch exchange and
telephony toolk ...)
@@ -153,45 +153,45 @@ CVE-2026-57188 (Asterisk is an open source private branch
exchange and telephony
CVE-2026-57185 (Asterisk is an open source private branch exchange and
telephony toolk ...)
TODO: check
CVE-2026-56084 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-54462 (Knative pkg provides common packages shared across Knative
repositorie ...)
TODO: check
CVE-2026-4337 (Unrestricted Upload of File with Dangerous Type vulnerability
in the P ...)
TODO: check
CVE-2026-48380 (Substance3D - Painter is affected by an out-of-bounds read
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48379 (Substance3D - Painter is affected by a Stack-based Buffer
Overflow vul ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48360 (Adobe Connect is affected by an Improper Control of Generation
of Code ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-47486 (NVIDIA PhysX for all platforms contains a vulnerability where
an attac ...)
TODO: check
CVE-2026-41022 (Eaton easySoft improperly validates TLS certificates presented
by easy ...)
- TODO: check
+ NOT-FOR-US: Eaton
CVE-2026-41021 (Eaton easyE4 uses an insufficiently strong password policy. An
attacke ...)
- TODO: check
+ NOT-FOR-US: Eaton
CVE-2026-41020 (Eaton easyE4 uses a static nonce during authentication, which
could al ...)
- TODO: check
+ NOT-FOR-US: Eaton
CVE-2026-24269 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker
could c ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-18451 (The HTML5 KVM-over-IP console authenticates with a token
returned by t ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-18450 (The BMC does not correctly enforce integrity and encryption
requiremen ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-18449 (The BMC does not correctly enforce integrity and encryption
requiremen ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-16521 (An OS command injection vulnerability exists because of
insufficient i ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-16491 (Grafana\u2019s RBAC service ignored the requested folder when
checking ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-16307 (Authorization bypass through User-Controlled key vulnerability
in Neti ...)
TODO: check
CVE-2026-15586 (Improper restriction of excessive authentication attempts
vulnerabilit ...)
TODO: check
CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat
allows authe ...)
- TODO: check
+ NOT-FOR-US: Hitachi Energy
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission
to uplo ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the
homeserver a ...)
TODO: check
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID
made Thun ...)
@@ -597,7 +597,7 @@ CVE-2026-117555 (CImg through 4.0.6 contains a heap
out-of-bounds read vulnerabi
CVE-2026-117554 (Admidio before 5.0.17 contains an improper access control
vulnerabilit ...)
TODO: check
CVE-2026-117553 (Umbraco CMS before 17.7.2 and 18.2.2 contains an
authentication bypass ...)
- TODO: check
+ NOT-FOR-US: Umbraco CMS
CVE-2026-117541 (svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught
exception ...)
TODO: check
CVE-2026-117540 (svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of
service vul ...)
@@ -619,7 +619,7 @@ CVE-2026-117533 (REDAXO from 5.18.0 before 5.21.4 contains
a stored cross-site s
CVE-2026-117532 (REDAXO core from 5.3.0 before 5.21.4 contains an
authentication bypass ...)
TODO: check
CVE-2026-117530 (In JetBrains Junie CLI before 26.8.17 command execution was
possible d ...)
- TODO: check
+ NOT-FOR-US: JetBrains
CVE-2026-117526 (A vulnerability was found in reduxjs redux-devtools 5.0.0.
Affected by ...)
TODO: check
CVE-2026-117516 (A weakness has been identified in oretnom23
php-travel-agency-system. ...)
@@ -655,9 +655,9 @@ CVE-2026-117494 (Cross-Site Scripting (XSS) in the
processing of SVG images subm
CVE-2026-117493 (Stored cross-site scripting (XSS) in BloX widgets. The
/api/dashboards ...)
TODO: check
CVE-2026-117466 (In affected versions of Octopus Server, a user holding the
System Mana ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-117341 (In affected versions of Octopus Server, creating a user
invitation wri ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-116900 (REDAXO before 5.21.4 contains a stored cross-site scripting
vulnerabil ...)
TODO: check
CVE-2026-116899 (REDAXO before 5.21.4 contains a broken access control
vulnerability th ...)
@@ -719,9 +719,9 @@ CVE-2026-116872 (Semantic MediaWiki from 3.0.0 before 7.3.1
contains an algorith
CVE-2026-116871 (Semantic MediaWiki 3.0.0 before 7.3.1 contains an
uncontrolled recursi ...)
TODO: check
CVE-2026-116870 (In affected versions of Octopus Server, OIDC token issuer
validation w ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-116863 (Cross-Site Request Forgery (CSRF) vulnerability in Tribulant
Software ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116683 (CTFer.io's CTFd Terraform Provider manages CTFd resources as
code. Fro ...)
TODO: check
CVE-2026-116682 (FileBrowser Quantum is a free, self-hosted, web-based file
manager. Pr ...)
@@ -745,31 +745,31 @@ CVE-2026-116673 (systeminformation is a System and OS
information library for no
CVE-2026-116672 (Authlib is a Python library which builds OAuth and OpenID
Connect serv ...)
TODO: check
CVE-2026-116662 (Tanium addressed a compression bomb vulnerability in Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116660 (Tanium addressed an improper access controls vulnerability in
Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116659 (Tanium addressed an uncontrolled resource consumption
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116658 (Tanium addressed a denial of service vulnerability in
Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116657 (Tanium addressed a denial of service vulnerability in
Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116656 (Tanium addressed an uncontrolled resource consumption
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116649 (Tanium addressed an improper output sanitization
vulnerability in Enfo ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116647 (Tanium addressed an improper output sanitization
vulnerability in Comp ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116627 (Improper neutralization of input during web page generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: Devolutions
CVE-2026-115495 (Cleartext Transmission of Sensitive Information vulnerability
in the W ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-115413 (Missing token audience validation in the OAuth authentication
mode of ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-115408 (In `github.com/eclipse-keypont/crypto11/v2` versions `>=
2.0.0-rc3, <= ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-115216 (In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS
certificate ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-114598 (In EPICS Base release 7.0.10 and prior, an insufficient
validation of ...)
TODO: check
CVE-2026-114597 (In EPICS Base release 7.0.10 and prior, an insufficient
validation of ...)
@@ -779,97 +779,97 @@ CVE-2026-114596 (In EPICS Base release 7.0.10 and prior,
an improper validation
CVE-2026-114595 (In EPICS Base release 7.0.10 and prior, an integer overflow
in network ...)
TODO: check
CVE-2026-114409 (Docker Desktop before version 4.97.0 could write third-party
API keys ...)
- TODO: check
+ NOT-FOR-US: Docker products not packaged in Debian
CVE-2026-113881 (A stack-based buffer overflow vulnerability in Fireware OS's
VPN Netwo ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-113775 (A maliciously crafted dynamic library, when loaded from an
arbitrary p ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-113644 (In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and
3.8.0-rc.1 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-112710 (A heap-based buffer overflow vulnerability exists in the
Fireware OS a ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-112709 (A heap-based buffer overflow vulnerability in the Fireware OS
authenti ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-112362 (@fastify/express is a Fastify plugin that runs Express
middleware insi ...)
TODO: check
CVE-2026-112353 (GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2
contains a stor ...)
TODO: check
CVE-2026-111585 (An integer overflow in the remote-control screen processing
component ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111584 (A race condition in the installation process of TeamViewer
Remote Mana ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111583 (Improper access control in the installer staging directory
used by Tea ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111582 (A DLL loading vulnerability in the TeamViewer Remote
Management Monito ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111548 (A stack-based buffer overflow vulnerabilityexists in the web
managemen ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111461 (An OS command injection vulnerability exists inOnCell
G3150A-LTE Serie ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111460 (A hard-coded cryptographic key vulnerability exists in the
OnCell G315 ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111459 (An improper certificate validation vulnerability exists in
Moxa Remote ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111107 (A NULL pointer dereference vulnerability in WatchGuard
Fireware OS\u20 ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-111054
REJECTED
CVE-2026-110737 (The push endpoint of a Vaadin application that uses server
push reflec ...)
- TODO: check
+ NOT-FOR-US: Vaadin
CVE-2026-10756 (TRO600 contains a vulnerability that allows an authenticated
attacker ...)
- TODO: check
+ NOT-FOR-US: Hitachi Energy
CVE-2026-10752 (The Advanced Custom Fields: Extended plugin for WordPress is
vulnerabl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-10537 (A misconfiguration issue in the affected service in
Control-M/Enterpri ...)
TODO: check
CVE-2026-10511 (The Jupiter X Core plugin for WordPress is vulnerable to
Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109995 (The Advanced Views \u2013 Display Framework for Gutenberg &
Elementor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109823 (An attacker can read the name of filesystem paths of your
application ...)
TODO: check
CVE-2026-108333 (Tanium addressed a use-after-free vulnerability in Threat
Response Cli ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108332 (Tanium addressed an improper link resolution before file
access vulner ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108331 (Tanium addressed an infinite loop vulnerability in Threat
Response Cli ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108330 (Tanium addressed an information disclosure vulnerability in
Threat Res ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108329 (Tanium addressed an unauthorized code execution vulnerability
in Threa ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108328 (Tanium addressed an insertion of sensitive information into
log file v ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108326 (Tanium addressed an improper certificate validation
vulnerability in S ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108325 (Tanium addressed an insertion of sensitive information into
log file v ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108316 (Tanium addressed an information disclosure vulnerability in
Tanium Ser ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108313 (Tanium addressed an incorrect privilege assignment
vulnerability in Ta ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108311 (Tanium addressed an insufficient logging vulnerability in
Tanium Serve ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108310 (Tanium addressed a denial of service vulnerability in Tanium
Server.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108309 (Tanium addressed an uncontrolled resource consumption
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108308 (Tanium addressed a SQL injection vulnerability in Patch.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108307 (Tanium addressed a heap-based buffer overflow vulnerability
in Index.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108306 (Tanium addressed a local privilege escalation vulnerability
in End-Use ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108305 (Tanium addressed a local privilege escalation vulnerability
in End-Use ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108304 (Tanium addressed a local privilege escalation vulnerability
in End-Use ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108303 (Tanium addressed an unauthorized code execution vulnerability
in Certi ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108302 (Tanium addressed an improper access controls vulnerability in
Comply.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108301 (Tanium addressed an improper access controls vulnerability in
Comply.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108142 (A vulnerability allowing an unauthenticated attacker to
bypass authori ...)
TODO: check
CVE-2026-108141 (A vulnerability allowing an authenticated user with the
Restore Operat ...)
@@ -877,11 +877,11 @@ CVE-2026-108141 (A vulnerability allowing an
authenticated user with the Restore
CVE-2026-108140 (A vulnerability allowing an authenticated user with the
Restore Operat ...)
TODO: check
CVE-2026-108015 (Private keys for eight eMudhra intermediate CA certificates
have been ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-108014 (Private keys for eight eMudhra intermediate CA certificates
have been ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-107672 (A maliciously crafted .stack.json file can trigger a trusted
Markdown ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-107671 (A vulnerability allowing an attacker with valid Administrator
credenti ...)
TODO: check
CVE-2026-107590 (An out-of-bounds write vulnerability in the Qt QTextCodec
iconv-based ...)
@@ -899,7 +899,7 @@ CVE-2026-107145 (The twofactor_gauthenticator plugin for
Roundcube is vulnerable
CVE-2026-107067 (An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier
allow a local ...)
TODO: check
CVE-2026-106087 (TRO600 contains an arbitrary file read vulnerability. An
unauthenticat ...)
- TODO: check
+ NOT-FOR-US: Hitachi Energy
CVE-2026-106078 (A vulnerability allowing an unauthenticated attacker to
bypass REST AP ...)
TODO: check
CVE-2026-106077 (A vulnerability allowing a user with the Veeam Backup for
Microsoft 36 ...)
@@ -909,61 +909,61 @@ CVE-2026-106076 (A vulnerability allowing an
authenticated organization-transfer
CVE-2026-105987 (KGS Software tia Viewer is vulnerable to Stored XSS via the
annotation ...)
TODO: check
CVE-2026-105781 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105780 (Adobe Campaign Classic (ACC) is affected by an Incorrect
Authorization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105779 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105489 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105477 (A vulnerability in Veeam Agent for Linux allows for local
privilege es ...)
TODO: check
CVE-2026-105323 (Improper neutralization of input during web page generation
('cross-si ...)
TODO: check
CVE-2026-104381 (A missing authentication vulnerability in Fireware OS's
FireCluster st ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-104354 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104353 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104351 (Adobe Campaign Classic (ACC) is affected by an Improper
Control of Gen ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104350 (Adobe Campaign Classic (ACC) is affected by a reflected
Cross-Site Scr ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104349 (Creative Cloud Desktop is affected by an Uncontrolled Search
Path Elem ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104189 (The 3D Viewer for Nextcloud is a comprehensive 3D model
viewer applica ...)
TODO: check
CVE-2026-103594 (A stack-based buffer overflow vulnerability in Fireware OS's
WireGuard ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-103593 (A stack-based buffer overflow vulnerability in the Fireware
OS logging ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-102816 (An authorization vulnerability exists in the country or
region configu ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102815 (An operating-system command injection vulnerability exists in
the tmpS ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102814 (An authentication weakness exists in the TP-Link TDDP v2
service of TP ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102813 (An authentication flaw exists in the password-recovery
functionality o ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102812 (A hard-coded cryptographic key vulnerability exists in the
user-config ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102800 (Joomla Extension - dj-extensions.com - Unauthenticated Stored
XSS in D ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102789 (Joomla Extension - balbooa.com - Missing Authorization Check
on Editor ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102788 (Joomla Extension - balbooa.com - Unauthenticated SQL
injection in Grid ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102787 (Joomla Extension - phoca.cz - CSRF in category management in
Phoca Dow ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102638 (A maliciously crafted HTML payload in the description of an
electronic ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-102637 (A maliciously crafted HTML payload in the documentName
parameter of a ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-102636 (A maliciously crafted HTML payload in a design name, when
displayed af ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-101034 (An attacker who obtained the hardcoded key could decrypt
domain/servic ...)
- TODO: check
+ NOT-FOR-US: Symantec
CVE-2026-100164 (Observable response discrepancy vulnerability in Rolantis
Information ...)
TODO: check
CVE-2025-64394 (A vulnerability allowing a low-privileged local user to write
arbitrar ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d821bbdfb3e46acbd1211abd3b582c11e42b5a7e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d821bbdfb3e46acbd1211abd3b582c11e42b5a7e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
