[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Aug 29 08:17:26 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d6c6342c by security tracker role at 2026-08-29T07:13:59+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -75,7 +75,7 @@ CVE-2026-82018 (IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11
CVE-2026-82017 (IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boo ...)
TODO: check
CVE-2026-81849 (Improper limitation of a pathname to a restricted directory in the aws ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-81533 (An application using the MongoDB BI Connector ODBC Driver may encounte ...)
TODO: check
CVE-2026-81532 (A user able to submit SQL through an application using the MongoDB Con ...)
@@ -89,25 +89,25 @@ CVE-2026-81517 (An unauthenticated party able to reach the port of a MongoDB Con
CVE-2026-81490 (A database user able to create a view in a namespace that MongoDB Conn ...)
TODO: check
CVE-2026-81346 (The Frontend Admin by DynamiApps WordPress plugin before 3.29.11 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81342 (The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81200 (The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.42 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81026 (The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-80725 (In the Linux kernel, the following vulnerability has been resolved: n ...)
TODO: check
CVE-2026-80488 (The WP Ultimate CSV Importer WordPress plugin before 9.0 does not pro ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-80311 (The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77939 (Flextype CMS through v1.0.0-dev contains an expression language inject ...)
TODO: check
CVE-2026-77786 (The Rank Math SEO WordPress plugin before 1.0.277 does not check that ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77704 (The Booking for Appointments and Events Calendar WordPress plugin bef ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77586 (In MongoDB Connector for BI, MongoDB object names such as collection, ...)
TODO: check
CVE-2026-77218 (PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticat ...)
@@ -123,13 +123,13 @@ CVE-2026-77063 (multer is a middleware for handling multipart/form-data in Node.
CVE-2026-77037 (multer is a middleware for handling multipart/form-data in Node.js. In ...)
TODO: check
CVE-2026-77012 (The \u7231\u91c7\u96c6\u6570\u636e\u91c7\u96c6\u548c\u53d1\u5e03\u63d2 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77010 (The HEL Online Classroom: AI-powered Online Classrooms WordPress plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77008 (The HEL Online Classroom: AI-powered Online Classrooms WordPress plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-77007 (The HEL Online Classroom: AI-powered Online Classrooms WordPress plugi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76798 (The MongoSQL Transition Readiness Tool writes query text and user name ...)
TODO: check
CVE-2026-76797 (The MongoSQL Transition Readiness Tool writes database and collection ...)
@@ -137,19 +137,19 @@ CVE-2026-76797 (The MongoSQL Transition Readiness Tool writes database and colle
CVE-2026-76794 (MongoSQL Transition Readiness Tool does not sufficiently encode databa ...)
TODO: check
CVE-2026-76651 (A buffer overflow vulnerability exists in the embedded HTTP servicein ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-76650 (A NULL pointer dereference vulnerability exists inTL-WR841N v14inthe U ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-76649 (A NULL pointer dereference vulnerability exists in TL-WR841N v14 in th ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-76586 (The Appointment Booking Calendar Plugin and Scheduling Plugin WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76548 (The User Profile Builder WordPress plugin before 4.0.1 does not prope ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76547 (The User Profile Builder WordPress plugin before 4.0.1 does not valid ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76546 (The User Profile Builder WordPress plugin before 4.0.1 does not escap ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-75486 (Synk Sweater Comb before 3.8.8 contains a command injection vulnerabil ...)
TODO: check
CVE-2026-75126 (PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple au ...)
@@ -165,21 +165,21 @@ CVE-2026-75122 (PLANET GS-4210-16P2S firmware before 3.441b260626 contains an au
CVE-2026-75121 (PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenti ...)
TODO: check
CVE-2026-75118 (A pre-authentication stack-based buffer overflow vulnerability exists ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-72984 (Access of resource using incompatible type ('type confusion') in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70331 (Improper neutralization of input used for llm prompting in Microsoft E ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70309 (Origin validation error in Microsoft Edge (Chromium-based) allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66324 (External control of file name or path in Microsoft Edge (Chromium-base ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66323 (Improper neutralization of parameter/argument delimiters in Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62904 (Incorrect authorization in Microsoft Edge (Chromium-based) allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58616 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-56100 (SpringBlade versions 2.7.3 through 3.5.0 contain a privilege escalatio ...)
TODO: check
CVE-2026-55891 (PrivateBin is an online pastebin where the server has zero knowledge o ...)
@@ -291,115 +291,115 @@ CVE-2026-54746 (Hatchet is a platform for orchestrating background tasks, AI age
CVE-2026-54745 (Kubeflow Pipelines enables users to build and deploy portable, scalabl ...)
TODO: check
CVE-2026-51665 (Incorrect access control in the getTracerouteCfg function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51664 (Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51663 (Incorrect access control in the getWiFiApcliScan function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51662 (Incorrect access control in the getCloudSrvCheckStatus function of TOT ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51661 (Incorrect access control in the getPortForwardRules function of TOTOLI ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51660 (Incorrect access control in the getIpPortFilterRules function of TOTOL ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51659 (Incorrect access control in the getUrlFilterRules function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51658 (Incorrect access control in the getDmzCfg function of TOTOLINK T6 4.1. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51657 (Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51656 (Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51655 (Incorrect access control in the getMacFilterRules function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51654 (Incorrect access control in the getScheduleCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51653 (Incorrect access control in the getStorageCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51652 (Incorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51651 (Incorrect access control in the getSmartQosCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51650 (Incorrect access control in the getRemoteCfg function of TOTOLINK T6 4 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51649 (Incorrect access control in the getDiagnosisCfg function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51648 (Incorrect access control in the getWanInfo function of TOTOLINK T6 4.1 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51647 (Incorrect access control in the getCrpcCfg function of TOTOLINK T6 4.1 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51646 (Incorrect access control in the getParentalRules function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51645 (Incorrect access control in the getPasswordCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51644 (Incorrect access control in the getCrpcConfig function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51643 (Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51642 (Incorrect access control in the getMeshRoutingTable function of TOTOLI ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51641 (Incorrect access control in the getWiFiMeshConfig function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51640 (Incorrect access control in the getMeshNeighborTable function of TOTOL ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51639 (Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51638 (Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51637 (Incorrect access control in the getMeshPortalTable function of TOTOLIN ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51636 (Incorrect access control in the getWiFiAclRules function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51635 (Incorrect access control in the getWiFiScheduleCfg function of TOTOLIN ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51634 (Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51633 (Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLI ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51632 (Incorrect access control in the getWiFiAdvancedCfg function of TOTOLIN ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51631 (Incorrect access control in the getStaticDhcpRules function of TOTOLIN ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51630 (Incorrect access control in the getDdnsCfg function of TOTOLINK T6 4.1 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51629 (Incorrect access control in the getStaticDhcpRules function of TOTOLIN ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51628 (Incorrect access control in the getGenerateWiFiWpsPin function of TOTO ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51627 (Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51626 (Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51625 (Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51624 (Incorrect access control in the getStationMacByIp function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51623 (Incorrect access control in the getDdnsStatus function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51622 (Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51621 (Incorrect access control in the getInitCfg function of TOTOLINK T6 4.1 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51620 (Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51619 (Incorrect access control in the getOnlineClient function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51618 (Incorrect access control in the getWizardCfg function of TOTOLINK T6 4 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51617 (Incorrect access control in the getSysStatusCfg function of TOTOLINK T ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51616 (Incorrect access control in the getWanIeCfg function of TOTOLINK T6 4. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51615 (Incorrect access control in the getLanCfg function of TOTOLINK T6 4.1. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51614 (Incorrect access control in the getAccessDeviceCfg function of TOTOLIN ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51613 (Incorrect access control in the getDeviceInfo function of TOTOLINK T6 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51611 (Incorrect access control in the startSlaveReboot function of TOTOLINK ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51610 (Incorrect access control in the RebootSystem function of TOTOLINK T6 4 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-51376 (An issue in BitChat for iOS v1.15.0 allows a remote attacker to cause ...)
TODO: check
CVE-2026-50980 (Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management ...)
@@ -407,67 +407,67 @@ CVE-2026-50980 (Cross-Site Scripting (XSS) vulnerability in the DNS lookup/manag
CVE-2026-41012 (Traffic interception vulnerability in BOSH Director vCenter CPI allows ...)
TODO: check
CVE-2026-3686 (IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vuln ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-3627 (IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remo ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-39071 (WordPress plugin (Spiffy Plugin) before 5.0.9 is affected by Stored Cr ...)
TODO: check
CVE-2026-39070 (WordPress plugin (Bit Assist) before 1.7.2 is affected by Stored Cross ...)
TODO: check
CVE-2026-22056 (StorageGRID (formerly StorageGRID Webscale) versions 11.5 and higher i ...)
- TODO: check
+ NOT-FOR-US: NetApp
CVE-2026-19430 (The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19295 (IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-19294 (IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticat ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-19286 (IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18904 (IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18899 (IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18891 (IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18729 (IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticat ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18545 (IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side req ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18527 (IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-18234 (The MStore API WordPress plugin before 4.21.1 does not verify that th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-18233 (The MStore API WordPress plugin before 4.21.1 does not verify that th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17522 (The Newsletters WordPress plugin before 4.17 does not perform any nonc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17520 (The Newsletters WordPress plugin before 4.17 does not generate its API ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17203 (IBM Administration Runtime Expert for i 1R1M0 could allow a remote aut ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-16947 (The Total processing card payments for WooCommerce WordPress plugin th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16821 (IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local atta ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-16600 (The SmartAIPress WordPress plugin through 1.2.0 does not perform a cap ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16259 (The Uix UserCenter WordPress plugin through 1.0.3 does not verify that ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-16061 (The Rest Routes WordPress plugin through 5.5.5 does not sanitize and ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-13735 (Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wg_crypt ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-13734 (Zephyr's WireGuard VPN data-plane receive handler wg_process_data_mess ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-10522 (The MemberHero WordPress plugin through 6.9 does not restrict which a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-64649 (IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perfo ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2025-36290 (IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not vali ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2025-36271 (IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker t ...)
- TODO: check
+ NOT-FOR-US: IBM
CVE-2026-59944
- composer 2.10.3-1
[trixie] - composer <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6c6342cd9749a0564d4777689a45ad1f7d36695
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6c6342cd9749a0564d4777689a45ad1f7d36695
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260829/03967af6/attachment.htm>
More information about the debian-security-tracker-commits
mailing list