Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8090993b by security tracker role at 2026-10-30T07:14:55+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,17 +1,17 @@
CVE-2026-97645 (The Gravity Forms plugin for WordPress is vulnerable to Stored
Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96389 (Missing Authorization vulnerability in Drupal Xray Audit
allows Forcef ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-92744 (Under certain conditions, privilege manager agent allows a
remote unau ...)
- TODO: check
+ NOT-FOR-US: Delinea
CVE-2026-92092 (A flaw was found in openshift-ansible. The installer
container's `run` ...)
- TODO: check
+ NOT-FOR-US: Red Hat software not packaged in Debian
CVE-2026-91920 (A flaw was found in the ChunkReader component of the Undertow
web serv ...)
TODO: check
CVE-2026-90437 (The Gravity Forms plugin for WordPress is vulnerable to Stored
Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89435 (The Formidable Forms \u2013 WordPress Form Builder for Contact
Forms, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76031 (Use after free in Input in Google Chrome prior to
156.0.8078.79 allowe ...)
TODO: check
CVE-2026-76030 (Memory corruption in FileSystem in Google Chrome prior to
156.0.8078.7 ...)
@@ -29,27 +29,27 @@ CVE-2026-76025 (Use after free in FileSystem in Google
Chrome prior to 156.0.807
CVE-2026-76024 (Memory corruption in MediaStream in Google Chrome prior to
156.0.8078. ...)
TODO: check
CVE-2026-74915 (A web page that contains unusual WebGPU content loaded into
the GPU GL ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-74912 (On GPU systems with the security vulnerability fix for
CVE-2026-49746 ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-67205
REJECTED
CVE-2026-67203
REJECTED
CVE-2026-65587 (A web page that contains unusual WebGPU content loaded into
the GPU GL ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-65586 (Software installed and run as a non-privileged user may
conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-65584 (Software installed and run as a non-privileged user may
conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-61719 (WeGIA is a web manager for charitable institutions. Prior to
3.8.7, a ...)
- TODO: check
+ NOT-FOR-US: WeGIA
CVE-2026-61707 (SOCFortress CoPilot focuses on providing a single pane of
glass for al ...)
TODO: check
CVE-2026-61673 (WeGIA is a web manager for charitable institutions. Prior to
3.8.7, a ...)
- TODO: check
+ NOT-FOR-US: WeGIA
CVE-2026-61671 (WeGIA is a web manager for charitable institutions. Prior to
the advis ...)
- TODO: check
+ NOT-FOR-US: WeGIA
CVE-2026-61654 (Lightdash is an open source business intelligence platform. In
affecte ...)
TODO: check
CVE-2026-61645 (Docat is a tool for hosting versioned static documentation. In
the aff ...)
@@ -57,7 +57,7 @@ CVE-2026-61645 (Docat is a tool for hosting versioned static
documentation. In t
CVE-2026-61576 (Lightdash is an open source business intelligence platform. In
affecte ...)
TODO: check
CVE-2026-5461 (The Forminator Forms plugin for WordPress is vulnerable to
Limited Fil ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-51832 (An issue in IDrive IDrive Backup for Windows Version 7.0.1.1
and below ...)
TODO: check
CVE-2026-51831 (An issue in IDrive IDrive Backup for Windows Version 7.0.1.1
and below ...)
@@ -65,11 +65,11 @@ CVE-2026-51831 (An issue in IDrive IDrive Backup for
Windows Version 7.0.1.1 and
CVE-2026-45049 (Open Access Management (OpenAM) is an access management
solution. Prio ...)
TODO: check
CVE-2026-19199 (Software installed and run as a non-privileged user may
conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-18629 (A web page that contains unusual GPU shader code is loaded
into the GP ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-15466 (Software installed and run as a non-privileged user may
conduct improp ...)
- TODO: check
+ NOT-FOR-US: Imagination Technologies
CVE-2026-13303 (HashiCorp Boundary and Boundary Enterprise are vulnerable to a
server- ...)
TODO: check
CVE-2026-119325 (Bricks Theme 2.4 and before for WordPress contains an
unauthenticated ...)
@@ -173,9 +173,9 @@ CVE-2026-119187 (Forge (also called node-forge) is a native
implementation of Tr
CVE-2026-119186 (Forge (also called node-forge) is a native implementation of
Transport ...)
TODO: check
CVE-2026-119087 (The Content Egg \u2013 Affiliate Product Importer & Price
Comparison p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-119059 (The Content Egg plugin for WordPress is vulnerable to
unauthorized mod ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118959 (A flaw was found in the required action provider mechanism of
Keycloak ...)
TODO: check
CVE-2026-118952 (A flaw was found in the Kroxylicious ACL authorizer. Its
prefix-matchi ...)
@@ -183,269 +183,269 @@ CVE-2026-118952 (A flaw was found in the Kroxylicious
ACL authorizer. Its prefix
CVE-2026-118947 (A flaw was found in the UMA resource registration endpoint of
the keyc ...)
TODO: check
CVE-2026-118698 (The JoomSport \u2013 for Sports: Team & League, Football,
Hockey & mor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118634 (The Events Made Easy plugin for WordPress is vulnerable to
Stored Cros ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118593 (A flaw was found in Red Hat Enterprise Linux 9 kernel builds.
An incom ...)
TODO: check
CVE-2026-118584 (Incorrect Authorization vulnerability in Drupal Field
Permissions allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118583 (Incorrect Authorization vulnerability in Drupal Field
Permissions allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118582 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118576 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118575 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118574 (Incorrect Permission Assignment for Critical Resource
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118573 (Missing Authorization vulnerability in Drupal OAuth2 Token
Manager all ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118572 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118571 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118570 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Fasttoggle a ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118569 (Incorrect Authorization vulnerability in Drupal Fasttoggle
allows Forc ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118568 (Insecure Storage of Sensitive Information vulnerability in
Drupal Cont ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118567 (Incorrect Authorization vulnerability in Drupal Bulk Update
User Roles ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118565 (Vulnerability in Drupal GroupEx PRO ( Daxko ) integration.
This issue ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118564 (Vulnerability in Drupal PayUmoney for Drupal Commerce. This
issue affe ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118563 (Vulnerability in Drupal CacheFlush. This issue affects
CacheFlush vers ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118562 (Deserialization of Untrusted Data vulnerability in Drupal
Single Conte ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118561 (External Control of File Name or Path vulnerability in Drupal
Single C ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118560 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118559 (Improper Verification of Cryptographic Signature
vulnerability in Drup ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118558 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Commerce Str ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118557 (Incorrect Authorization vulnerability in Drupal Commerce
Shipping allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118556 (Incorrect Authorization vulnerability in Drupal Commerce
Shipping allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118555 (Incorrect Authorization vulnerability in Drupal Commerce
License allow ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118554 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118553 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118552 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118551 (Insecure Storage of Sensitive Information vulnerability in
Drupal AI ( ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118550 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118549 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118548 (Incorrect Authorization vulnerability in Drupal AI
(Artificial Intelli ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118546 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118545 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118544 (Exposure of Sensitive Information Through Data Queries
vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118543 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Commerce Cor ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118542 (Incorrect Authorization vulnerability in Drupal Commerce Core
allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118541 (Incorrect Authorization vulnerability in Drupal Commerce Core
allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118540 (Incorrect Authorization vulnerability in Drupal Commerce Core
allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118539 (Missing Authorization vulnerability in Drupal Commerce Core
allows For ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-118500 (The Cool FormKit Lite \u2013 Advanced Form Builder for
Elementor plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118475 (A flaw was found in Eye of GNOME. When parsing a specially
crafted PNG ...)
TODO: check
CVE-2026-118194 (The Page and Post Restriction plugin for WordPress is
vulnerable to Au ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118165 (The Firelight Lightbox WordPress plugin before 2.3.23 does
not escape ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118101 (The BuddyForms WordPress plugin before 2.10.1 does not verify
that a u ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118100 (The BuddyForms WordPress plugin before 2.10.3 does not check
that the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118072 (The Fraud Prevention For WooCommerce and EDD WordPress plugin
before 2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-118071 (The Joinchat WordPress plugin before 6.4.2 does not escape
the messag ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-117572 (The WP Visitor Statistics (Real Time Traffic) WordPress
plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-117571 (The WP Visitor Statistics (Real Time Traffic) WordPress
plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-116622 (The Food Store \u2013 Online Food Delivery & Pickup plugin
for WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115277 (The User Frontend WordPress plugin before 4.3.14 does not
sanitise an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114573 (Improperly Controlled Modification of Dynamically-Determined
Object At ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114572 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114571 (Incorrect Authorization vulnerability in Drupal Rabbit Hole
allows For ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114555 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114554 (Incorrect Authorization vulnerability in Drupal AI File to
Text allows ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114553 (Incorrect Authorization vulnerability in Drupal Frontend
Editing allow ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114548 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114547 (Missing Authorization vulnerability in Drupal TinyPNG allows
Forceful ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114546 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114545 (Incorrect Authorization vulnerability in Drupal Fullcalendar
View allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114544 (Incorrect Authorization vulnerability in Drupal Media Bulk
Upload allo ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114543 (Incorrect Authorization vulnerability in Drupal Simple User
Management ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114542 (Use of Web Browser Cache Containing Sensitive Information
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114541 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Frontend Edi ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114540 (Incorrect Authorization vulnerability in Drupal Domain allows
Forceful ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114539 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114538 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114537 (Incorrect Authorization vulnerability in Drupal View
Unpublished allow ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114536 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114535 (Missing Authorization vulnerability in Drupal Swiper
formatter allows ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114534 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114533 (Missing Authorization vulnerability in Drupal \xc1gora
Transparency Th ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114532 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114531 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114530 (Incorrect Authorization vulnerability in Drupal Dopup allows
Forceful ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114529 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114528 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114527 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114526 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114525 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114524 (Privilege Defined With Unsafe Actions vulnerability in Drupal
Custom F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114523 (Improper Neutralization of Special Elements used in an OS
Command ("OS ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-114444 (The Security Plugin, Firewall & Malware Scanner with Auto
Removal Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114443 (The Security Plugin, Firewall & Malware Scanner with Auto
Removal Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114422 (The Enable Media Replace WordPress plugin before 4.2.3 does
not restri ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-112922 (A flaw was found in Ghostscript. A remote attacker could
exploit this ...)
TODO: check
CVE-2026-112605 (This issue was addressed with improved handling of symlinks.
This issu ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2026-112602 (An authorization issue was addressed with improved state
management. T ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2026-112211
REJECTED
CVE-2026-110738 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-110732 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for
WordPress plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110133 (A flaw was found in Ghostscript. When processing a specially
crafted T ...)
TODO: check
CVE-2026-108515 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-108514 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-108099 (Use of Externally-Controlled Input to Select Classes or Code
('Unsafe ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-108097 (Use of Externally-Controlled Input to Select Classes or Code
('Unsafe ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107312 (Allocation of Resources Without Limits or Throttling
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107311 (Improper Check for Unusual or Exceptional Conditions
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107310 (Server-Side Request Forgery (SSRF) vulnerability in Drupal
Freelinking ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107309 (Missing Authorization vulnerability in Drupal Easy Breadcrumb
allows F ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107308 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107307 (Incorrect Authorization vulnerability in Drupal SmartLinker
AI allows ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107306 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107268 (Insertion of Sensitive Information Into Sent Data
vulnerability in Dru ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107267 (Missing Authorization vulnerability in Drupal DKAN allows
Forceful Bro ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107266 (Missing Authorization vulnerability in Drupal Views Share
allows Force ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107265 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107264 (Improper Neutralization of Special Elements Used in a
Template Engine ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107263 (Incorrect Authorization vulnerability in Drupal Gutenberg
allows Force ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107262 (Cross-Site Request Forgery (CSRF) vulnerability in Drupal
Advanced Fil ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107261 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107260 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107259 (Improper Neutralization of Special Elements Used in a
Template Engine ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107258 (Incorrect Authorization vulnerability in Drupal Inline Entity
Form Dia ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107257 (Incorrect Authorization vulnerability in Drupal Actstream
allows Force ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107256 (Improper Restriction of Excessive Authentication Attempts
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107255 (Incorrect Authorization vulnerability in Drupal Restrict
route by IP a ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107254 (Authentication Bypass Using an Alternate Path or Channel
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107253 (Vulnerability in Drupal Orphans Media. This issue affects
Orphans Medi ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107252 (Improper Neutralization of Input During Web Page Generation
("Cross-si ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107251 (Incorrect Authorization vulnerability in Drupal Entity
Reference Manag ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107250 (Vulnerability in Drupal ECA Helper. This issue affects ECA
Helper vers ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107249 (Improperly Controlled Modification of Dynamically-Determined
Object At ...)
- TODO: check
+ NOT-FOR-US: Drupal core and addons
CVE-2026-107239 (A vulnerability allowing a member of the Veeam Virtualization
Extensio ...)
TODO: check
CVE-2026-107238 (A vulnerability allowing an authenticated domain user to
perform remot ...)
TODO: check
CVE-2026-104368 (The Export and Import Users and Customers plugin for
WordPress is vuln ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103963 (A flaw was found in glib-networking. When establishing
connections usi ...)
TODO: check
CVE-2026-103039 (The Gravity Forms plugin for WordPress is vulnerable to PHP
Object Inj ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-115943 (Spreadsheet::XLSX versions before 0.19 for Perl allow code
execution v ...)
- libspreadsheet-xlsx-perl <unfixed> (bug #1152516)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44746764/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8090993bf5bda325f963603f7de73e1fc28585bd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8090993bf5bda325f963603f7de73e1fc28585bd
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
