Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ce1a1720 by security tracker role at 2026-10-28T19:16:30+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,115 +1,115 @@
CVE-2026-92797 (The MemberPress plugin for WordPress is vulnerable to
Cross-Site Reque ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92665 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90724 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90723 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90721 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90720 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90719 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90717 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-88967 (A user with query access to an Azure Monitor data source in
Grafana ca ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-88858 (A user with the Viewer role in Grafana can crash the server by
submitt ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-87880 (Sensitive information disclosure due to missing SSL
certificate verifi ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87879 (Sensitive information disclosure due to improper token
validation. The ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87878 (Linux binaries have executable stack attribute enabled. The
following ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87103 (Sensitive information disclosure and manipulation due to
improper toke ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87102 (Sensitive information disclosure and manipulation due to
improper toke ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87101 (Sensitive information disclosure due to improper token
validation. The ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87100 (Protection mechanism failure due to missing binary hardening
in Linux ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87099 (Cross-site scripting (XSS) vulnerability due to improper input
validat ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87098 (Sensitive information disclosure due to improper
authorization. The fo ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87097 (Sensitive information disclosure due to insufficiently
protected crede ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-86401 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86400 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86399 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86398 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86397 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86396 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86395 (Dell PowerProtect Data Domain Virtual Edition, Feature Release
version ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86394 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86393 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86392 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86391 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86390 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86389 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86388 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86386 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86385 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86384 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86383 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86380 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86379 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86378 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86377 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-85655 (The Enable Media Replace plugin for WordPress is vulnerable to
authori ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84725 (when EAP runs with -secmgr, the openjdk-orb's JDKBridge
honours attack ...)
TODO: check
CVE-2026-83525 (Incorrect operator (CWE-480) in the FetchSnapshot RPC handler
in Apach ...)
TODO: check
CVE-2026-82962 (ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c
can prepen ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-82961 (The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did
not vali ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-81472 (Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC
Service Module ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-79656 (A user with read access to Grafana's server logs, or to a log
store th ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-6064 (Link following vulnerability in Data Shredder components in
Norton Ant ...)
TODO: check
CVE-2026-67187 (Ninja Forms plugin for WordPress before 3.15.4 contains an
incomplete ...)
TODO: check
CVE-2026-67080 (HCL BigFix AEX is affected by an Information Disclosure
vulnerability ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67079 (HCL BigFix AEX is affected by a Clickjacking vulnerability,
which coul ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67077 (HCL BigFix AEX is affected by a Server-Side Request Forgery
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67074 (HCL BigFix AEX is affected by a Remote Code Execution
Vulnerability . ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67073 (HCL BigFix AEX is affected by an Unrestricted File Upload and
Improper ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-59979 (YosemiteCrew provides organization-based service and task
management. ...)
TODO: check
CVE-2026-59959 (SAIL is a cross-platform library for loading and saving images
with su ...)
@@ -145,9 +145,9 @@ CVE-2026-50539 (Xibo is an open source digital signage
platform with a web conte
CVE-2026-47235 (SimulationCraft is a tool to explore combat mechanics in World
of Warc ...)
TODO: check
CVE-2026-44179 (XWiki Remote Macros provides XWiki rendering macros that are
useful wh ...)
- TODO: check
+ NOT-FOR-US: XWiki
CVE-2026-21830 (HCL BigFix AEX product is affected by a vulnerability in the
aws-sdk p ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-16020 (Improper neutralization of input during web page generation
('cross-si ...)
TODO: check
CVE-2026-14571 (A Blind SQL Injection vulnerability in Futurum Software\u2019s
managem ...)
@@ -167,39 +167,39 @@ CVE-2026-118683 (MONAI from 1.2.0 before 1.6.1 contains a
remote code execution
CVE-2026-118681 (go-chi chi before 5.5.0 contains an authentication bypass in
middlewar ...)
TODO: check
CVE-2026-118680 (SiYuan 3.8.7 through 3.8.8 fails to normalize Windows
GLOBALROOT devic ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-118679 (n8n before 1.123.83, 2.41.4, and 2.42.1 contains a
server-side request ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118678 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains a
prototype pollut ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118677 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing
confirma ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118676 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an
authorization bypa ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118675 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential
guard by ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118649 (n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a
client-supplied w ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118648 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before
2.44.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118647 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before
2.44.1 saves ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118646 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular
expression ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118645 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before
2.44.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118644 (n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed
workflow's ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118643 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before
2.44.1 store ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118642 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an
authorization bypa ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118641 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before
2.44.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118640 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an
authorization bypa ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118633 (A path traversal vulnerability allows a remote
unauthenticated attacke ...)
- TODO: check
+ NOT-FOR-US: Sophos
CVE-2026-118619 (Ultralytics Google Drive Download Path Traversal Remote Code
Execution ...)
TODO: check
CVE-2026-118618 (Ultralytics parse_model Code Injection Remote Code Execution
Vulnerabi ...)
@@ -295,19 +295,19 @@ CVE-2026-118243 (Highcharts JS is a JavaScript charting
library based on SVG. Fr
CVE-2026-118242 (Highcharts JS is a JavaScript charting library based on SVG.
From 2.3. ...)
TODO: check
CVE-2026-118040 (In Progress\xae Telerik\xae Document Processing Libraries
prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118039 (In Progress\xae Telerik\xae Document Processing Libraries
prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118038 (In Progress\xae Telerik\xae Document Processing Libraries
prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118037 (In Progress\xae Telerik\xae Document Processing Libraries
prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118036 (In Progress\xae Telerik\xae Document Processing Libraries
prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118035 (In Progress\xae Telerik\xae Document Processing Libraries
prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118029 (Unverified ownership of the default query result location in
the Athen ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-117858
REJECTED
CVE-2026-117857
@@ -643,37 +643,37 @@ CVE-2026-117693
CVE-2026-117692
REJECTED
CVE-2026-117626 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly
identifi ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117625 (A missing permission check in Jenkins 2.587 and earlier, LTS
2.580.1 a ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117624 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not
consistent ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117623 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not
escape the ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117622 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows
agents to se ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117621 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes
on the age ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117620 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows
attackers wi ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117619 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows
requests aut ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117618 (In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the
HTTP endpoi ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117617 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for
symbolic ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117616 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides
an HTTP en ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117615 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows
symbolic li ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117614 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts
the launch ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117613 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not
restrict i ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117612 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not
apply its ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-116855 (Missing Authorization vulnerability in wphocus My auctions
allegro my- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116797 (Highcharts JS is a JavaScript charting library based on SVG.
From 2.0. ...)
TODO: check
CVE-2026-116796 (Highcharts JS is a JavaScript charting library based on SVG.
From 10.3 ...)
@@ -689,53 +689,53 @@ CVE-2026-116776 (USB Test is a lightweight Windows CLI
utility for verifying sec
CVE-2026-116593 (Apache Kafka Connect has the
/connector-plugins/{connector-type}/confi ...)
TODO: check
CVE-2026-116404 (Missing Authorization vulnerability in David Anderson Redux
Framework ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116393 (Missing Authorization vulnerability in iHomefinder, Inc.
Optima Expres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116392 (Deserialization of Untrusted Data vulnerability in
PickPlugins Accordi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116391 (Deserialization of Untrusted Data vulnerability in GS Plugins
GS Logo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116390 (Deserialization of Untrusted Data vulnerability in stepasyuk
Filter Ev ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116389 (Deserialization of Untrusted Data vulnerability in crossi72
Phoenix Me ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116078 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
TODO: check
CVE-2026-115968 (Deserialization of Untrusted Data vulnerability in Ultimate
Member Ult ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115957 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115904 (Topluyo is a social networking platform. A vulnerability
exists in Top ...)
TODO: check
CVE-2026-115644 (Apache Kafka Connect contains an authentication bypass
vulnerability a ...)
TODO: check
CVE-2026-115612 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115609 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115607 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115606 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115603 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115596 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115593 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115591 (Insertion of Sensitive Information Into Sent Data
vulnerability in Sup ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115590 (Deserialization of Untrusted Data vulnerability in weDevs
Dokan dokan- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115402 (OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged
local us ...)
TODO: check
CVE-2026-115223 (The Smart Popup by Supsystic WordPress plugin before 2.0.2
does not pr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114349 (When a broker decodes a compressed record batch, the
per-record decode ...)
TODO: check
CVE-2026-114278 (The che-machine-exec service constructs a shell command by
concatenati ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-112375 (An authenticated Kafka principal with no authorization grants
(not eve ...)
TODO: check
CVE-2026-112357 (GFI KerioConnect (Kerio Connect) Outlook Connector (Offline
Edition), ...)
@@ -747,13 +747,13 @@ CVE-2026-112198 (XML External Entity (XXE) injection
vulnerability in the SAFT i
CVE-2026-112197 (Vulnerability due to a lack of authentication in critical
functions of ...)
TODO: check
CVE-2026-111850 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-111551 (Several Kafka deserialization paths read a size or count
field from in ...)
TODO: check
CVE-2026-111496 (Kafka Streams derives its stream-time clock from record
timestamps. Pu ...)
TODO: check
CVE-2026-111411 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-111115 (Apache Kafka's code-generated readers for flexible protocol
versions r ...)
TODO: check
CVE-2026-111108 (Apache Kafka's code-generated protocol readers pre-size an
array's col ...)
@@ -765,11 +765,11 @@ CVE-2026-110985 (A Kafka broker using SASL/OAUTHBEARER
with the default validato
CVE-2026-110952 (A Kafka broker that authenticates clients with
SASL/OAUTHBEARER using ...)
TODO: check
CVE-2026-110541 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-110540 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-110508 (The Essential Addons for Elementor WordPress plugin before
6.8.7 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110183 (PostgreSQL Anonymizer contains a vulnerability related to
static maski ...)
TODO: check
CVE-2026-110182 (PostgreSQL Anonymizer contains a vulnerability related to the
anon.par ...)
@@ -781,11 +781,11 @@ CVE-2026-106972 (An uncontrolled recursion in the
MessagePack\BufferUnpacker::un
CVE-2026-106971 (An integer overflow in the MessagePack\BufferUnpacker
component of ryb ...)
TODO: check
CVE-2026-106648 (The Royal Elementor Addons WordPress plugin before 1.7.1070
does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106484 (Insufficient policy enforcement in chrome-devtools-mcp in
Google Chrom ...)
TODO: check
CVE-2026-106079 (An Improper Neutralization of Special Elements used in an OS
Command ( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-105620 (PostgreSQL Anonymizer doesn't mask data returned by a
sub-query in a r ...)
TODO: check
CVE-2026-105619 (PostgreSQL Anonymizer doesn't mask data accessed thru a
security_invok ...)
@@ -809,59 +809,59 @@ CVE-2026-105457 (Improper Limitation of a Pathname to a
Restricted Directory ('P
CVE-2026-105420 (Wing FTP Server does not verify user's base folder. An
attacker with a ...)
TODO: check
CVE-2026-103799 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103792 (Dell PowerProtect Data Domain Management Center, Feature
Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103780 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103779 (Dell PowerProtect Data Domain, Feature Release versions
7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103506 (An authenticated user in Grafana can read SSO client secrets
and modif ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-103411 (An Integer Underflow vulnerability in DhcpMessageDecoder in
Juniper Ne ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103410 (An Integer Overflow vulnerability in the DPI certificate
scanner in Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103409 (A Missing authentication for critical function vulnerability
in Junipe ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103408 (A Stack Buffer Overflow vulnerability in the DHCP client in
Juniper Ne ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103407 (An Improper Limitation of a Pathname to a Restricted
Directory vulnera ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103406 (An Improper Neutralization of Special Elements used in an OS
Command v ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103405 (An Improper Neutralization of Special Elements in Output Used
by a Dow ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103404 (An Incorrect Permission Assignment for Critical Resource
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103403 (An Improper Neutralization of Special Elements used in an OS
Command ( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103402 (An Insufficient Verification of Data Authenticity
vulnerability in PCL ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103401 (An Improper Link Resolution Before File Access ('Link
Following') vuln ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103400 (An Improper Neutralization of Special Elements in Output Used
by a Dow ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103394 (An Improper Initialization vulnerability in the SSR software
in Junipe ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103393 (An Out-of-Bounds Read vulnerability in the VRRP
implementation in Juni ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103392 (An Out-of-Bounds Write vulnerability in the TCP header
processing in J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103391 (An Out-of-bounds Write vulnerability in the SSR TCP
proxy/optimization ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103390 (An Out-of-Bounds Read vulnerability in the HttpParser
component in Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103330 (The Sadad QA Payment WordPress plugin through 1.28 does not
correctly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103313 (The BitPay Gateway for WooCommerce WordPress plugin through
4.1.3 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102799 (Joomla Extension - icagenda.com - CSV formula injection in
the registr ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102790 (Joomla Extension - icagenda.com - Stored XSS via url-type
event Custo ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-101935 (The Echo Knowledge Base \u2013 Documentation, FAQs, Chat &
Smart Searc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101274 (When pretix is used as the identity provider in a
Single-Sign-On (SSO) ...)
TODO: check
CVE-2026-101273 (Some of our API endpoints allowed to create order payments
referencing ...)
@@ -869,9 +869,9 @@ CVE-2026-101273 (Some of our API endpoints allowed to
create order payments refe
CVE-2026-101272 (The mechanism binding files generated during a shredding
process to th ...)
TODO: check
CVE-2026-100105 (A user with permission to edit contact points but not their
protected ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2025-30414 (Local privilege escalation due to improper authentication. The
followi ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-117501 (HTTP::Body versions before 1.24_01 for Perl allow memory
exhaustion vi ...)
- libhttp-body-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711939/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce1a1720bc9e4e78ea3251c533cb5df0362bf68c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce1a1720bc9e4e78ea3251c533cb5df0362bf68c
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
