Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0d2b72cc by security tracker role at 2026-11-02T07:15:25+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,155 +1,155 @@
CVE-2026-95863 (Improper neutralization of input during web page generation in
Apache ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-87718 (Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the
Content-Secur ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-84231 (Improper neutralization of input during web page generation in
Apache ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-84177 (Incorrect behavior order in Apache Wicket: a file path is
validated be ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-84172 (Files accessible to external parties in Apache Wicket.
org.apache.wic ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-84170 (Allocation of resources without limits or throttling in Apache
Wicket. ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-83594 (Memory allocation with an excessive size value in Apache
Wicket. org. ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-83559 (Improper encoding or escaping of output in Apache Wicket.
org.apache. ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-83539 (Improper neutralization of input during web page generation in
Apache ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82956 (Improper neutralization of input during web page generation in
Apache ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82898 (Incorrect order of security checks in Apache Wicket.
org.apache.wicke ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82840 (Session fixation in Apache Wicket.
org.apache.wicket.authroles.authen ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82705 (Missing authorization in Apache Wicket.
org.apache.wicket.authorizati ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82704 (Missing authorization in Apache Wicket.
org.apache.wicket.core.reques ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82559 (Insufficient session expiration in Apache Wicket.
org.apache.wicket.p ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82558 (Missing authorization in Apache Wicket.
org.apache.wicket.protocol.ws ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82557 (Missing authorization in Apache Wicket.
org.apache.wicket.markup.html ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-82115 (Missing authorization in Apache Wicket.
org.apache.wicket.protocol.ws ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-68591 (In Modem, there is a possible escalation of privilege due to a
permiss ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-68590 (In ip_stack, there is a possible out of bounds read due to
improper in ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-68589 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-68588 (In Modem, there is a possible way (for XXX) to XXXXX due to an
integer ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-66570 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62048 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-20600 (In Modem, there is a possible application crash due to a logic
error. ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20599 (In Modem, there is a possible escalation of privilege due to a
missing ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20598 (In Modem, there is a possible out of bounds read due to an
integer ove ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20597 (In Modem, there is a possible out of bounds read due to a
missing boun ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20596 (In Modem, there is a possible out of bounds read due to
improper input ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20595 (In neuropilot, there is a possible out of bounds write due to
a missin ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20594 (In Modem, there is a possible out of bounds read due to a
missing boun ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20593 (In Modem, there is a possible application crash due to
improper input ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20592 (In Modem, there is a possible information disclosure due to
side chann ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20591 (In GPU pdma, there is a possible escalation of privilege due
to a miss ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20590 (In display, there is a possible system crash due to a logic
error. Thi ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20585 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20584 (In usb, there is a possible memory corruption due to a missing
bounds ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20583 (In usb, there is a possible system crash due to use after
free. This c ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20582 (In usb, there is a possible memory corruption due to double
free. This ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20581 (In usb, there is a possible memory corruption due to use after
free. T ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20580 (In usb, there is a possible system crash due to use after
free. This c ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20578 (In Modem, there is a possible information disclosure due to
side chann ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20577 (In Modem, there is a possible permission bypass due to a
permissions b ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20576 (In afe, there is a possible out of bounds write due to a
missing bound ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20575 (In afe, there is a possible memory corruption due to use after
free. T ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20574 (In afe, there is a possible memory corruption due to use after
free. T ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20573 (In afe, there is a possible memory corruption due to double
free. This ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20572 (In adsp, there is a possible out of bounds write due to an
integer ove ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20571 (In afe, there is a possible memory corruption due to use after
free. T ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20570 (In adsp, there is a possible escalation of privilege due to
use after ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20569 (In adsp, there is a possible memory corruption due to use
after free. ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20568 (In afe, there is a possible system crash due to use after
free. This c ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20567 (In afe, there is a possible out of bounds write due to a
missing bound ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20566 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20565 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20564 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20563 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20562 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20561 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20560 (In Modem, there is a possible system crash due to improper
input valid ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20559 (In GPU pdma, there is a possible memory corruption due to use
after fr ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20558 (In GPU pdma, there is a possible escalation of privilege due
to use af ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20557 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20556 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20555 (In Modem, there is a possible out of bounds read due to a
missing boun ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20554 (In Modem, there is a possible system crash due to a missing
bounds che ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20553 (In DA, there is a possible out of bounds write due to a
missing bounds ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20552 (In ccci, there is a possible out of bounds write due to a
missing boun ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20551 (In gnss, there is a possible out of bounds write due to a
missing boun ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20550 (In gnss, there is a possible out of bounds write due to a
missing boun ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20549 (In Modem, there is a possible out of bounds write due to
improper inpu ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20548 (In Modem, there is a possible out of bounds write due to an
integer ov ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20547 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20546 (In Modem, there is a possible out of bounds write due to an
incorrect ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20545 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-20499 (In Modem, there is a possible out of bounds write due to a
missing bou ...)
- TODO: check
+ NOT-FOR-US: MediaTek
CVE-2026-120349 (A security flaw has been discovered in dayrui XunRuiCMS up to
4.7.4. A ...)
TODO: check
CVE-2026-120348 (A vulnerability was identified in dayrui XunRuiCMS up to
4.7.4. Affect ...)
@@ -157,9 +157,9 @@ CVE-2026-120348 (A vulnerability was identified in dayrui
XunRuiCMS up to 4.7.4.
CVE-2026-120347 (A vulnerability was determined in dayrui XunRuiCMS up to
4.7.4. Affect ...)
TODO: check
CVE-2026-120345 (A vulnerability was found in WAVLINK WN551X3-A
M51X3_V251020-WO-182e96 ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120344 (A vulnerability has been found in WAVLINK WN551X3-A
M51X3_V251020-WO-1 ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120343 (A flaw has been found in mathurvishal
CloudClassroom-PHP-Project. The ...)
TODO: check
CVE-2026-120342 (A vulnerability was detected in mathurvishal
CloudClassroom-PHP-Projec ...)
@@ -207,7 +207,7 @@ CVE-2026-120312 (Network-AI from 5.13.4 before 5.15.5
contains a path traversal
CVE-2026-120311 (Network-AI from 5.13.4 before 5.15.5 contains a path
traversal vulnera ...)
TODO: check
CVE-2026-120310 (Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1
returns st ...)
- TODO: check
+ NOT-FOR-US: Parse Server
CVE-2026-120309 (Nuxt from 4.6.0 before 4.6.2 contains a route parameter
confusion vuln ...)
TODO: check
CVE-2026-120308 (A Beta9 tenant can attach a volume when deploying a function,
endpoint ...)
@@ -217,37 +217,37 @@ CVE-2026-120307 (The Beta9 worker serves the sandbox file
API from outside the c
CVE-2026-120306 (Beta9 turns each shell command in a tenant image definition
into a Doc ...)
TODO: check
CVE-2026-120283 (A vulnerability was identified in Linksys E8450
1.2.00.360516. Affecte ...)
- TODO: check
+ NOT-FOR-US: Linksys
CVE-2026-120282 (A vulnerability was determined in WAVLINK WN536AX6-A V260507.
This imp ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120281 (A vulnerability was found in WAVLINK WN536AX6-A V260507. This
affects ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120280 (A vulnerability has been found in WAVLINK WN536AX6-A V260507.
The impa ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120279 (A flaw has been found in WAVLINK WN536AX6-A V260507. The
affected elem ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120278 (A vulnerability was detected in WAVLINK WN536AX6-A
V260507_2.0.0. Impa ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120277 (A security vulnerability has been detected in WAVLINK
WN536AX6-A V2605 ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120276 (A weakness has been identified in WAVLINK WN536AX6-A
V260507_2.0.0. Th ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120275 (A security flaw has been discovered in Shanghai Xi Yu Ji Zhi
Technolog ...)
TODO: check
CVE-2026-120274 (A vulnerability was identified in beecue FastBee up to 2.1.0.
Affected ...)
TODO: check
CVE-2026-120263 (When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not
the defau ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-120242 (A security flaw has been discovered in Ruijie RG-ES205GC,
RG-ES206GC-P ...)
TODO: check
CVE-2026-120241 (A vulnerability was identified in Ruijie RG-ES205GC,
RG-ES206GC-P, RG- ...)
TODO: check
CVE-2026-120240 (A vulnerability was determined in WAVLINK WN553X1-B
V260403_2.0.0. Thi ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120239 (A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0.
This vul ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120238 (A vulnerability has been found in WAVLINK WN553X1-B
260403_2.0.0. This ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120237 (A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58.
Affected b ...)
TODO: check
CVE-2026-120236 (A vulnerability was detected in ag-ui-protocol ag-ui up to
0.0.58. Aff ...)
@@ -261,15 +261,15 @@ CVE-2026-120233 (A security flaw has been discovered in
ag-ui-protocol ag-ui up
CVE-2026-120232 (A vulnerability was identified in Horizon DataSys Reboot
Restore Stand ...)
TODO: check
CVE-2026-120231 (A vulnerability was determined in WAVLINK WN553X1-B
V260403_2.0.0. The ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120230 (A vulnerability was found in WAVLINK WN701AE 260105. Impacted
is the f ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120229 (A vulnerability has been found in WAVLINK WN553X1-B
260403_2.0.0. This ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120228 (A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0.
This vulnera ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120227 (A vulnerability was detected in WAVLINK WN701AE
M01AE_V260105. This af ...)
- TODO: check
+ NOT-FOR-US: Wavlink
CVE-2026-120226 (A security vulnerability has been detected in Hangzhou
Xiongmai Techno ...)
TODO: check
CVE-2026-120225 (A weakness has been identified in Oray Pugongying X5 Pro up
to 7.6.1. ...)
@@ -279,83 +279,83 @@ CVE-2026-120224 (A security flaw has been discovered in
Oray Pugongying X5 Pro u
CVE-2026-120223 (A vulnerability was identified in Oray Pugongying X5 Pro up
to 7.6.1. ...)
TODO: check
CVE-2026-119627 (The web profile and RSS/Atom feed routes of users and
organizations ch ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-119625 (The `/{username}` web route accepted personal access tokens
over HTTP ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-119533 (Repository and organization project boards listed the pull
requests th ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-119480 (Improper Limitation of a Pathname to a Restricted Directory
('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-119441 (`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of
an organ ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-118504 (The web interface blocks issue and pull request changes on
archived re ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-118395 (Gitea 1.27.3 stopped personal access tokens restricted to
public resou ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-118394 (The OAuth2 userinfo endpoint (`/login/oauth/userinfo`)
decided whether ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-118386 (Workflows triggered by a pull request review were read from
the commit ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-117685 (The OCI registry's cross-repository blob mount checked the
target pack ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-117680 (Improper Check for Unusual or Exceptional Conditions
vulnerability in ...)
TODO: check
CVE-2026-117677 (When parsing an uploaded Helm chart, Gitea decompressed the
archive an ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-117649 (The issue timeline API and the web issue page hid
cross-reference even ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-117646 (The repositories, stars and watching tabs of user profiles
and the rep ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-117635 (The `/api/v1/admin` route group did not enforce the
`public-only` rest ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-116474 (The `GITEA_TOKEN` of a Gitea Actions job authenticates as the
`gitea-a ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-116296 (The API routes for releases, release assets, milestones and
repository ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-116289 (Gitea did not reject personal access tokens restricted to
public resou ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-114199 (`GET /api/v1/users/{username}/heatmap` computed the
contribution heatm ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-113429 (Legacy (v1 to v3) Actions artifact uploads stored the
request's `Conte ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-112887 (Gitea Actions task tokens authenticate to the REST API as a
shared sys ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as
src:gitea, but never in a stable release)
CVE-2026-111089 (Apache Wicket reads texts from the application's resource
bundles \u20 ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-101186 (DoS vulnerability in the window module. Impact: Successful
exploitatio ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101185 (OOB read vulnerability in the peripheral module. Impact:
Successful ex ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101183 (UAF vulnerability in the location service module. Impact:
Successful e ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101182 (Race condition vulnerability in the location service module.
Impact: S ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101181 (Permission control vulnerability in the WLAN module. Impact:
Successfu ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101180 (DoS vulnerability in the file parsing module. Impact:
Successful explo ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101179 (Buffer overflow vulnerability in the file preview module.
Impact: Succ ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101177 (Permission control vulnerability in the Optimizer module.
Impact: Succ ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101176 (Permission control vulnerability in the event notification
management ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101175 (Null pointer dereference vulnerability in the ArkWeb module.
Impact: S ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101174 (DoS vulnerability in the DSoftBus module. Impact: Successful
exploitat ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101173 (DoS vulnerability in the DSoftBus module. Impact: Successful
exploitat ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101172 (Permission control vulnerability in the graphics
module.Impact: Succes ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101171 (Permission control vulnerability in the background task
management mod ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101170 (DoS vulnerability in the file parsing module. Impact:
Successful explo ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2025-11969 (The System REST APIs do not correctly enforce access control
mechanism ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2024-5617 (The account lock feature fails to correctly enforce account
lockouts o ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2026-XXXX [GHSA-c5px-7h4c-gj8p: Remote code execution in C-Kermit]
- ckermit <unfixed>
NOTE:
https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p
@@ -900,9 +900,9 @@ CVE-2026-117666 (Improper Validation of Certificate with
Host Mismatch vulnerabi
CVE-2026-117656 (Acceptance of Extraneous Untrusted Data With Trusted Data
vulnerabilit ...)
NOT-FOR-US: Erlang Foundation software not packaged in Debian
CVE-2026-117645 (Improper Neutralization of Input During Web Page Generation
('Cross-si ...)
- TODO: check
+ NOT-FOR-US: Erlang Foundation software not packaged in Debian
CVE-2026-116755 (Improper Neutralization of Special Elements used in a Command
('Comman ...)
- TODO: check
+ NOT-FOR-US: SoftIron
CVE-2026-116563 (The Photo Gallery, Sliders, Proofing and Themes \u2013
NextGEN Gallery ...)
NOT-FOR-US: WordPress plugin
CVE-2026-116557 (The WP Booking System - Booking Calendar plugin for WordPress
is vulne ...)
@@ -3246,7 +3246,7 @@ CVE-2026-115962 (Authentication Bypass by Spoofing
vulnerability in myCred myCre
CVE-2026-115821 (The NewsmanApp plugin for WordPress is vulnerable to Stored
Cross-Site ...)
NOT-FOR-US: WordPress plugin
CVE-2026-115805 (Improper handling of local filesystem paths in Rapid7 Insight
Agent on ...)
- TODO: check
+ NOT-FOR-US: Rapid7
CVE-2026-115795 (P-Net before 1.0.3 does not check that a complete block
header is pres ...)
NOT-FOR-US: RT-Labs
CVE-2026-115794 (P-Net before 1.0.3 passes the application alarm callback a
data length ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d2b72cc2104484d2fe577bf6a92375ec0b0aeac
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d2b72cc2104484d2fe577bf6a92375ec0b0aeac
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
