[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jul 3 20:16:43 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc9c5ff4 by security tracker role at 2026-07-03T19:16:09+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,41 +1,41 @@
 CVE-2026-9756 (The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross- ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-9230 (The Quiz and Survey Master (QSM) \u2013 Easy Quiz and Survey Maker plu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-9148 (The Comments \u2013 wpDiscuz plugin for WordPress is vulnerable to Sto ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-8804 (Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise  ...)
 	TODO: check
 CVE-2026-8351 (The RTMKit plugin for WordPress is vulnerable to Stored Cross-Site Scr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-5137 (The RTMKit (rometheme-for-elementor) plugin for WordPress is vulnerabl ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-59234 (Authorization Bypass Through User-Controlled Key (CWE-639) in Calendar ...)
 	TODO: check
 CVE-2026-58379 (A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. Th ...)
 	TODO: check
 CVE-2026-56085 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-56015 (Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds ...)
 	TODO: check
 CVE-2026-54483 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-53478 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-50238
 	REJECTED
 CVE-2026-4804 (The Zakra theme for WordPress is vulnerable to Stored Cross-Site Scrip ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-4322 (Improper neutralization of input during web page generation ('cross-si ...)
 	TODO: check
 CVE-2026-4321 (Improper neutralization of special elements used in an SQL command ('S ...)
 	TODO: check
 CVE-2026-49815 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-49814 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-49813 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-47898 (Improper Restriction of XML External Entity Reference vulnerability in ...)
 	TODO: check
 CVE-2026-47897 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
@@ -43,31 +43,31 @@ CVE-2026-47897 (Improper Limitation of a Pathname to a Restricted Directory ('Pa
 CVE-2026-47896 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
 	TODO: check
 CVE-2026-46730 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-46468 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-46467 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-46466 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-46465 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-46464 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-46463 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-44269 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-44268 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-41124 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-41123 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-35159 (Dell Client Platform BIOS contains an Authentication Bypass by Primary ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-26355 (Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 r ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-14631 (webpack-dev-server versions 5.2.5 and earlier terminate the whole Node ...)
 	TODO: check
 CVE-2026-14620 (webpack-dev-server versions 5.2.5 and earlier expose two internal deve ...)
@@ -91,15 +91,15 @@ CVE-2026-14459 (Improper neutralization of argument delimiters in a command ('ar
 CVE-2026-13341 (A vulnerability exists in the Kong Konnect Model Context Protocol (MCP ...)
 	TODO: check
 CVE-2026-11900 (The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordPress i ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-11778 (The The CURCY \u2013 Multi Currency for WooCommerce \u2013 Smoothly on ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-11398 (The LatePoint \u2013 Calendar Booking Plugin for Appointments and Even ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-10055 (In Eclipse Theia since version 1.26.0, the backend /services/request-s ...)
-	TODO: check
+	NOT-FOR-US: Eclipse
 CVE-2026-10054 (In affected versions of Eclipse Theia (1.8.1 and later), the browser b ...)
-	TODO: check
+	NOT-FOR-US: Eclipse
 CVE-2026-14355 [PHP: ext/openssl: Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD]
 	- php8.4 <unfixed>
 	- php8.2 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc9c5ff4b73e1713d500d0cf62382ed7b144cc82

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc9c5ff4b73e1713d500d0cf62382ed7b144cc82
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/a0cdf6da/attachment.htm>

More information about the debian-security-tracker-commits mailing list