[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Feb 16 20:13:57 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d9db02d2 by security tracker role at 2026-02-16T20:13:49+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,13 +1,13 @@
 CVE-2026-2577 (The WhatsApp bridge component in Nanobot binds the WebSocket server to ...)
 	TODO: check
 CVE-2026-2567 (A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vuln ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-2566 (A security vulnerability has been detected in Wavlink WL-NU516U1 up to ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-2565 (A weakness has been identified in Wavlink WL-NU516U1 20251208. Affecte ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-2564 (A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.0 ...)
-	TODO: check
+	NOT-FOR-US: Intelbras
 CVE-2026-2563 (A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4 ...)
 	TODO: check
 CVE-2026-2562 (A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4 ...)
@@ -41,29 +41,29 @@ CVE-2026-2547 (A vulnerability was detected in LigeroSmart up to 6.1.26. The imp
 CVE-2026-2546 (A security vulnerability has been detected in LigeroSmart up to 6.1.26 ...)
 	TODO: check
 CVE-2026-2452 (Emails sent by pretix can utilize placeholders that will be filled wit ...)
-	TODO: check
+	NOT-FOR-US: rami.io products
 CVE-2026-2451 (Emails sent by pretix can utilize placeholders that will be filled wit ...)
-	TODO: check
+	NOT-FOR-US: rami.io products
 CVE-2026-2447 (Heap buffer overflow in libvpx. This vulnerability affects Firefox < 1 ...)
 	TODO: check
 CVE-2026-2415 (Emails sent by pretix can utilize placeholders that will be filled wit ...)
-	TODO: check
+	NOT-FOR-US: rami.io products
 CVE-2026-2101 (A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAv ...)
-	TODO: check
+	NOT-FOR-US: Dassault Systemes
 CVE-2026-2032 (Malicious scripts that interrupt new tab page loading could cause desy ...)
 	TODO: check
 CVE-2026-2001 (The WowRevenue plugin for WordPress is vulnerable to unauthorized plug ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-26930 (SmarterTools SmarterMail before 9526 allows XSS via MAPI requests.)
 	TODO: check
 CVE-2026-1783
 	REJECTED
 CVE-2026-1335 (An Out-Of-Bounds Write vulnerability affecting the EPRT file reading p ...)
-	TODO: check
+	NOT-FOR-US: Dassault Systemes
 CVE-2026-1334 (An Out-Of-Bounds Read vulnerability affecting the EPRT file reading pr ...)
-	TODO: check
+	NOT-FOR-US: Dassault Systemes
 CVE-2026-1333 (A Use of Uninitialized Variable vulnerability affecting the EPRT file  ...)
-	TODO: check
+	NOT-FOR-US: Dassault Systemes
 CVE-2026-1046 (Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate  ...)
 	TODO: check
 CVE-2026-0999 (Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9db02d2db694116a7419355445f4d3ca65c64be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9db02d2db694116a7419355445f4d3ca65c64be
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260216/20446999/attachment.htm>


More information about the debian-security-tracker-commits mailing list