[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Feb 20 21:06:10 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bcbb9007 by Salvatore Bonaccorso at 2026-02-20T22:05:56+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51,13 +51,13 @@ CVE-2026-26745 (OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerabili
 CVE-2026-26725 (An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 allo ...)
 	NOT-FOR-US: edu Business Solutions Print Shop Pro WebDesk
 CVE-2026-26724 (Cross Site Scripting vulnerability in Key Systems Inc Global Facilitie ...)
-	TODO: check
+	NOT-FOR-US: Key Systems Inc Global Facilities Management Software
 CVE-2026-26723 (Cross Site Scripting vulnerability in Key Systems Inc Global Facilitie ...)
-	TODO: check
+	NOT-FOR-US: Key Systems Inc Global Facilities Management Software
 CVE-2026-26722 (An issue in Key Systems Inc Global Facilities Management Software v.20 ...)
-	TODO: check
+	NOT-FOR-US: Key Systems Inc Global Facilities Management Software
 CVE-2026-26721 (An issue in Key Systems Inc Global Facilities Management Software v.20 ...)
-	TODO: check
+	NOT-FOR-US: Key Systems Inc Global Facilities Management Software
 CVE-2026-26102 (Incorrect Permission Assignment for Critical Resource in Owl opds 2.2. ...)
 	TODO: check
 CVE-2026-26101 (Incorrect Permission Assignment for Critical Resource in Owl opds 2.2. ...)
@@ -77,7 +77,7 @@ CVE-2026-26095 (Incorrect Permission Assignment for Critical Resource in Owl opd
 CVE-2026-26093 (Improper Neutralization of Special Elements used in a Command ('Comman ...)
 	TODO: check
 CVE-2026-26050 (The installer for \u30b8\u30e7\u30d6\u30ed\u30b0\u96c6\u8a08/\u5206\u6 ...)
-	TODO: check
+	NOT-FOR-US: Ricoh
 CVE-2026-26049 (The web management interface of the device renders the passwords in a  ...)
 	TODO: check
 CVE-2026-26048 (The Wi-Fi router is vulnerable to de-authentication attacks due to the ...)
@@ -107,7 +107,7 @@ CVE-2026-24943 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-24941 (Missing Authorization vulnerability in wpjobportal WP Job Portal wp-jo ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-24891 (openITCOCKPIT is an open source monitoring tool built for different mo ...)
-	TODO: check
+	NOT-FOR-US: openITCOCKPIT
 CVE-2026-24790 (The underlying PLC of the device can be remotely influenced, without p ...)
 	TODO: check
 CVE-2026-24455 (The embedded web interface of the device does not support HTTPS/TLS fo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bcbb9007ccf9abaa17ab75bbb36d9df7caedc90d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bcbb9007ccf9abaa17ab75bbb36d9df7caedc90d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260220/b79a1651/attachment.htm>


More information about the debian-security-tracker-commits mailing list