[Git][security-tracker-team/security-tracker][master] Process some NFUs

Thu Aug 20 11:51:53 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
87afabe8 by Salvatore Bonaccorso at 2026-08-20T12:49:10+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -93,31 +93,31 @@ CVE-2026-76878 (In OpenStack Aodh before 22.0.1, the alarm list API bypasses pro
 	NOTE: https://launchpad.net/bugs/2161771
 	NOTE: https://security.openstack.org/ossa/OSSA-2026-036.html
 CVE-2026-76850 (LMDeploy deserializes disaggregated-serving peer messages with pickle. ...)
-	TODO: check
+	NOT-FOR-US: InternLM LMDeploy
 CVE-2026-76832 (Agno's PythonTools in libs/agno/agno/tools/python.py contains a path t ...)
-	TODO: check
+	NOT-FOR-US: Agno
 CVE-2026-76827 (A flaw was found in search-indexer. This vulnerability allows a regist ...)
-	TODO: check
+	NOT-FOR-US: search-indexer
 CVE-2026-76800 (A flaw has been found in DeDeCMS 3. Affected by this vulnerability is  ...)
-	TODO: check
+	NOT-FOR-US: DeDeCMS
 CVE-2026-76799 (A weakness has been identified in code-projects Login Registration Sys ...)
 	NOT-FOR-US: code-projects
 CVE-2026-76795 (A vulnerability has been found in AeternaLabsHQ PullMD 3.2.0. This imp ...)
-	TODO: check
+	NOT-FOR-US: AeternaLabsHQ PullMD
 CVE-2026-76785 (A security flaw has been discovered in amirsanni Mini-Inventory-and-Sa ...)
-	TODO: check
+	NOT-FOR-US: Mini-Inventory-and-Sales-Management-System
 CVE-2026-76783 (A security vulnerability has been detected in DeDeCMS 53_1_UTF8. This  ...)
-	TODO: check
+	NOT-FOR-US: DeDeCMS
 CVE-2026-76764 (A flaw has been found in code-projects Employee Management System 1.0. ...)
 	NOT-FOR-US: code-projects
 CVE-2026-76762 (A vulnerability was detected in code-projects Assessment Management 1. ...)
-	TODO: check
+	NOT-FOR-US: code-projects Assessment Management
 CVE-2026-76761 (A vulnerability was identified in chenhg5 cc-connect up to 1.4.1. This ...)
-	TODO: check
+	NOT-FOR-US: chenhg5 cc-connect
 CVE-2026-76760 (A vulnerability was found in chenhg5 cc-connect up to 1.4.1. Affected  ...)
-	TODO: check
+	NOT-FOR-US: chenhg5 cc-connect
 CVE-2026-76647 (Leantime JSON-RPC API through version 3.9.0 contains a missing authori ...)
-	TODO: check
+	NOT-FOR-US: Leantime
 CVE-2026-76591 (A security flaw has been discovered in TRENDnet TEW-755AP up to 202607 ...)
 	NOT-FOR-US: TRENDnet
 CVE-2026-76590 (A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. A ...)
@@ -131,11 +131,11 @@ CVE-2026-76583 (A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03.
 CVE-2026-76582 (A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affec ...)
 	NOT-FOR-US: TRENDnet
 CVE-2026-76576 (A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This ...)
-	TODO: check
+	NOT-FOR-US: yangzongzhuan RuoYi-Vue
 CVE-2026-76574 (A flaw has been found in code-projects Hospital Information System 1.0 ...)
 	NOT-FOR-US: code-projects
 CVE-2026-76572 (A vulnerability was detected in pkp pkp-lib up to 3.3.0-22/3.4.0-10/3. ...)
-	TODO: check
+	NOT-FOR-US: pkp pkp-lib
 CVE-2026-76405 (In Splunk On-Call (VictorOps) app versions below 1.0.43 on Splunkbase, ...)
 	NOT-FOR-US: Cisco
 CVE-2026-76404 (In Splunk MCP Server app versions below 1.2.1, a user who holds the "a ...)
@@ -357,13 +357,13 @@ CVE-2026-76252 (In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and
 CVE-2026-76251 (In Splunk Enterprise versions below 10.4.2, 10.2.6, and 10.0.9, a user ...)
 	NOT-FOR-US: Cisco
 CVE-2026-76139 (A flaw was found in acm-operator-bundle. The build process for this co ...)
-	TODO: check
+	NOT-FOR-US: acm-operator-bundle
 CVE-2026-75963 (The Events Made Easy plugin for WordPress is vulnerable to Local File  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-75860 (The JSON Options WordPress plugin through 0.0.4 does not have any capa ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-75628 (Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen of ...)
-	TODO: check
+	NOT-FOR-US: Punk::OAuth2 Perl module
 CVE-2026-75616 (An OS command injection vulnerability exists in the web management int ...)
 	NOT-FOR-US: TPLink
 CVE-2026-75596 (Netty is an asynchronous, event-driven network application framework.  ...)
@@ -373,7 +373,7 @@ CVE-2026-75595 (Netty is an asynchronous, event-driven network application frame
 CVE-2026-75593 (BuildKit is a toolkit for converting source code to build artifacts in ...)
 	TODO: check
 CVE-2026-75569 (A flaw was found in mce-operator-bundle. The build process fetches and ...)
-	TODO: check
+	NOT-FOR-US: mce-operator-bundle
 CVE-2026-75476 (Tanium addressed a compression bomb vulnerability in Threat Response.)
 	NOT-FOR-US: Tanium
 CVE-2026-75112 (A security issue exists within OTTO\xae Fleet Manager. The vulnerabili ...)
@@ -387,9 +387,9 @@ CVE-2026-74227
 CVE-2026-74226
 	REJECTED
 CVE-2026-73542 (Multiple SEIKO EPSON printers and scanners contain revoked root certif ...)
-	TODO: check
+	NOT-FOR-US: EPSON
 CVE-2026-71368 (F-RevoCRM contains a cross-site scripting vulnerability. If a user vie ...)
-	TODO: check
+	NOT-FOR-US: F-RevoCRM
 CVE-2026-69550 (Out-of-bounds read in Remote Desktop Client allows an unauthorized att ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-69222 (LiquidJS is a Shopify / GitHub Pages compatible template engine in pur ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87afabe814c4f6b1de0d6f16e9c432f8b4e1258a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/87afabe814c4f6b1de0d6f16e9c432f8b4e1258a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260820/eadc56dc/attachment.htm>
