[Git][security-tracker-team/security-tracker][master] Process some more NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d3894dfe by Salvatore Bonaccorso at 2026-08-10T22:35:37+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -152,7 +152,7 @@ CVE-2026-72568 (An out-of-bounds read vulnerability in Redis through 8.8.1 allow
 CVE-2026-72567 (An improper path validation vulnerability in AsyncFuncAI/deepwiki-open ...)
 	NOT-FOR-US: AsyncFuncAI/deepwiki-open
 CVE-2026-72566 (A server-side request forgery (SSRF) vulnerability in automatisch thro ...)
-	TODO: check
+	NOT-FOR-US: automatisch
 CVE-2026-72565 (A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows  ...)
 	NOT-FOR-US: Tencent APIJSON
 CVE-2026-72564 (An improper authorization vulnerability in fosrl/pangolin through v1.2 ...)
@@ -217,23 +217,23 @@ CVE-2026-66485 (GNU cpio is vulnerable to an uncontrolled memory allocation in t
 CVE-2026-66484 (GNU cpio contains a Path Traversal vulnerability in its tar archive ex ...)
 	TODO: check
 CVE-2026-66411 (DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authenticatio ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66410 (Android and iOS apps ECOVACS PRO App improperly validate server certif ...)
-	TODO: check
+	NOT-FOR-US: Android and iOS apps ECOVACS PRO App
 CVE-2026-66409 (DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords  ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66408 (The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66407 (DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66406 (DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certif ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66405 (DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled. T ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66404 (DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-66403 (DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging  ...)
-	TODO: check
+	NOT-FOR-US: DEEBOT
 CVE-2026-65948 (UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8 ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-65945 (Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3894dfe55838a8d591dce1bd3c3048f78f7a097

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3894dfe55838a8d591dce1bd3c3048f78f7a097
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260810/1f3f6b85/attachment-0001.htm>