[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7180cb1f by security tracker role at 2026-02-08T08:14:01+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,43 +11,43 @@ CVE-2026-2205 (A vulnerability was identified in WeKan up to 8.20. This affects
 CVE-2026-2141 (A security flaw has been discovered in WuKongOpenSource WukongCRM up t ...)
 	TODO: check
 CVE-2026-2140 (A vulnerability was identified in Tenda TX9 up to 22.03.02.10_multi. A ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-2139 (A vulnerability was determined in Tenda TX9 up to 22.03.02.10_multi. A ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-2138 (A vulnerability was found in Tenda TX9 up to 22.03.02.10_multi. Affect ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-2137 (A vulnerability has been found in Tenda TX3 up to 16.03.13.11_multi. T ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-2136 (A flaw has been found in projectworlds Online Food Ordering System 1.0 ...)
-	TODO: check
+	NOT-FOR-US: Project Worlds
 CVE-2026-2135 (A vulnerability was detected in UTT HiPER 810 1.7.4-141218. The impact ...)
 	TODO: check
 CVE-2026-2134 (A security vulnerability has been detected in PHPGurukul Hospital Mana ...)
-	TODO: check
+	NOT-FOR-US: PHPGurukul
 CVE-2026-2133 (A weakness has been identified in code-projects Online Music Site 1.0. ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-2132 (A security flaw has been discovered in code-projects Online Music Site ...)
-	TODO: check
+	NOT-FOR-US: code-projects
 CVE-2026-2131 (A vulnerability was identified in XixianLiang HarmonyOS-mcp-server 0.1 ...)
 	TODO: check
 CVE-2026-2130 (A vulnerability was determined in BurtTheCoder mcp-maigret up to 1.0.1 ...)
 	TODO: check
 CVE-2026-2129 (A vulnerability was found in D-Link DIR-823X 250416. Affected by this  ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2026-2122 (A security flaw has been discovered in Xiaopi Panel up to 20260126. Th ...)
 	TODO: check
 CVE-2026-2120 (A vulnerability was identified in D-Link DIR-823X 250416. This affects ...)
-	TODO: check
+	NOT-FOR-US: D-Link
 CVE-2026-2118 (A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impa ...)
 	TODO: check
 CVE-2026-2117 (A vulnerability was found in itsourcecode Society Management System 1. ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-2116 (A vulnerability has been found in itsourcecode Society Management Syst ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-2115 (A flaw has been found in itsourcecode Society Management System 1.0. T ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-2114 (A vulnerability was detected in itsourcecode Society Management System ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-2113 (A security vulnerability has been detected in yuan1994 tpadmin up to 1 ...)
 	TODO: check
 CVE-2026-2111 (A weakness has been identified in JeecgBoot up to 3.9.0. Affected by t ...)
@@ -59,7 +59,7 @@ CVE-2026-25859 (Wekan versions prior to 8.20 allow non-administrative users to a
 CVE-2026-25858 (macrozheng mall version 1.0.3 and prior contains an authentication vul ...)
 	TODO: check
 CVE-2026-25857 (Tenda G300-F router firmware versio 16.01.14.2 and prior contain an OS ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-25568 (WeKan versions prior to 8.19 contain an authorization logic vulnerabil ...)
 	TODO: check
 CVE-2026-25567 (WeKan versions prior to 8.19 contain an insecure direct object referen ...)
@@ -81,9 +81,9 @@ CVE-2026-25560 (WeKan versions prior to 8.19 contain an LDAP filter injection vu
 CVE-2025-15564 (A vulnerability has been found in Mapnik up to 4.2.0. This vulnerabili ...)
 	TODO: check
 CVE-2025-15100 (The JAY Login & Register plugin for WordPress is vulnerable to Privile ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2025-15027 (The JAY Login & Register plugin for WordPress is vulnerable to Privile ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-2109 (A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. ...)
 	NOT-FOR-US: jsbroks COCO Annotator
 CVE-2026-2108 (A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7180cb1f1d8efcfc34cac128717e28d72b7b8ad2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7180cb1f1d8efcfc34cac128717e28d72b7b8ad2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260208/2ec74290/attachment.htm>