Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e1409adb by Salvatore Bonaccorso at 2026-10-29T21:20:52+01:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -115,9 +115,9 @@ CVE-2026-80069 (MasterStudy LMS plugin for WordPress before
3.7.50 contains a mi
CVE-2026-80067 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a
path tra ...)
NOT-FOR-US: WordPress plugin
CVE-2026-7190 (A cross-site scripting (XSS) vulnerability in the ICTBroadcast
softwar ...)
- TODO: check
+ NOT-FOR-US: ICTBroadcast software
CVE-2026-79589 (The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed
contains an in ...)
- TODO: check
+ NOT-FOR-US: WIFI4 N300 router (Model: T1 Pro)
CVE-2026-77819 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote
authenticat ...)
NOT-FOR-US: IBM
CVE-2026-77817 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote
authenticat ...)
@@ -235,17 +235,17 @@ CVE-2026-52709 (Improper Neutralization of Input During
Web Page Generation ('Cr
CVE-2026-52708 (Missing Authorization vulnerability in weDevs WP User Frontend
wp-user ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-51912 (OpenBMB XAgent v1.0.0 contains directory traversal
vulnerability in ma ...)
- TODO: check
+ NOT-FOR-US: OpenBMB XAgent
CVE-2026-51905 (TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect
Access ...)
- TODO: check
+ NOT-FOR-US: TransformerOptimus SuperAGI
CVE-2026-51903 (SuperAGI v0.0.14 contains an improper access control
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: TransformerOptimus SuperAGI
CVE-2026-51902 (SuperAGI up to v0.0.14 contains an improper access control
vulnerabili ...)
- TODO: check
+ NOT-FOR-US: TransformerOptimus SuperAGI
CVE-2026-51863 (DB-GPT v0.7.5 and 0.8.0 contains directory traversal in
use_example_fi ...)
- TODO: check
+ NOT-FOR-US: DB-GPT
CVE-2026-51851 (modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to
Directo ...)
- TODO: check
+ NOT-FOR-US: modelscope agent-zero
CVE-2026-49142 (OpenEMR before 8.5.0 contains an authenticated SQL injection
vulnerabi ...)
NOT-FOR-US: OpenEMR
CVE-2026-48884 (Missing Authorization vulnerability in weDevs WP User Frontend
wp-user ...)
@@ -994,7 +994,7 @@ CVE-2026-54455 (OpenCATS is an open-source applicant
tracking system and recruit
CVE-2026-54453 (OpenCATS is an open-source applicant tracking system and
recruitment C ...)
NOT-FOR-US: OpenCATS
CVE-2026-54162 (Ember is a real-time terminal dashboard for Caddy servers with
Franken ...)
- TODO: check
+ NOT-FOR-US: Ember
CVE-2026-42949 (A authorization bypass vulnerability exists in the
/api/runscript func ...)
NOT-FOR-US: FUXA
CVE-2026-42922 (A authorization bypass vulnerability exists in the /nodered
functional ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1409adb0e5210cc6dab27cbd0bc028b4577a7a0
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1409adb0e5210cc6dab27cbd0bc028b4577a7a0
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
