[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Jul 6 20:14:50 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
56e70a81 by security tracker role at 2026-07-06T19:14:45+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,17 +1,17 @@
CVE-2026-9182 (ArcGIS Server contains an unrestricted file upload vulnerability. An u ...)
- TODO: check
+ NOT-FOR-US: Esri
CVE-2026-9181 (ArcGIS Server contains a directory traversal vulnerability. An unauth ...)
- TODO: check
+ NOT-FOR-US: Esri
CVE-2026-9165 (A flaw was found in Red Hat Advanced Cluster Security for Kubernetes ( ...)
TODO: check
CVE-2026-7185 (A validation vulnerability has been identified in certain web features ...)
TODO: check
CVE-2026-6901 (Untrusted Search Path vulnerability in B&R Industrial Automation GmbH ...)
- TODO: check
+ NOT-FOR-US: ABB group
CVE-2026-6900 (Improper certificate validation vulnerability in B&R Industrial Automa ...)
- TODO: check
+ NOT-FOR-US: ABB group
CVE-2026-6382 (The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manage ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-5268 (An authentication bypass vulnerability exists in the default SFTP serv ...)
TODO: check
CVE-2026-59196 (pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted lock ...)
@@ -55,57 +55,57 @@ CVE-2026-54059 (Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFont
CVE-2026-53913 (Improper Authentication, Missing Authentication for Critical Function, ...)
TODO: check
CVE-2026-4249 (The throttling event handling mechanism in multiple WSO2 products acce ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2026-49365 (Generation of Error Message Containing Sensitive Information vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-49099 (Improper Neutralization of Special Elements in Output Used by a Downst ...)
TODO: check
CVE-2026-49098 (Improper Input Validation, Improper Neutralization of Special Elements ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-49097 (Improper Input Validation, Improper Neutralization of Special Elements ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-49086 (Improper Input Validation, Unintended Proxy or Intermediary ('Confused ...)
TODO: check
CVE-2026-49042 (Improper Input Validation vulnerability in Apache Camel. This issue a ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-48614 (An improper authorization vulnerability in the Plesk XML API allows an ...)
TODO: check
CVE-2026-48316 (ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Imp ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48206 (Improper Input Validation, Authorization Bypass Through User-Controlle ...)
TODO: check
CVE-2026-48205 (Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerab ...)
TODO: check
CVE-2026-48204 (Improper Input Validation, Improper Access Control vulnerability in Ap ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-48203 (Improper Neutralization of Special Elements in Output Used by a Downst ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46726 (Improper Input Validation, Exposure of Sensitive Information to an Una ...)
TODO: check
CVE-2026-46592 (Improper Input Validation, Unintended Proxy or Intermediary ('Confused ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46591 (Improper Neutralization of Special Elements in Data Query Logic vulner ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46590 (Deserialization of Untrusted Data vulnerability in Apache Camel PQC co ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46588 (Improper Input Validation vulnerability in Apache Camel. This issue a ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46587 (Improper Input Validation vulnerability in Apache Camel. This issue a ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46585 (Improper Input Validation, Authorization Bypass Through User-Controlle ...)
TODO: check
CVE-2026-46584 (Improper Input Validation, Exposure of Sensitive Information to an Una ...)
TODO: check
CVE-2026-46457 (Improper Input Validation vulnerability in Apache Camel NATS component ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46456 (Improper Input Validation vulnerability in Apache Camel AWS2-SQS Compo ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46455 (Insufficient Session Expiration vulnerability in Apache Camel Keycloak ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46454 (Improper Input Validation vulnerability in Apache Camel Cometd Compone ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-46453 (Improper Input Validation, Authorization Bypass Through User-Controlle ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-44937 (Potential forgery of webhook requests when using a unauthenticated web ...)
TODO: check
CVE-2026-44936 (Missing filtering when the helmRepoURLRegex field isn't set on a GitRe ...)
@@ -113,39 +113,39 @@ CVE-2026-44936 (Missing filtering when the helmRepoURLRegex field isn't set on a
CVE-2026-44934 (A information disclosure when DEBUG loglevel is set in SUSE Rancher AI ...)
TODO: check
CVE-2026-43867 (Deserialization of Untrusted Data vulnerability in Apache Camel PQC Co ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-43866 (Deserialization of Untrusted Data vulnerability in Apache Camel, Apach ...)
TODO: check
CVE-2026-43865 (Deserialization of Untrusted Data vulnerability in Apache Camel Hazelc ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-43825 (Untrusted Java Deserialization in Apache OpenNLP SvmDoccatModel Versi ...)
TODO: check
CVE-2026-42527 (Deserialization of Untrusted Data vulnerability in Apache Camel. The ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-41434 (OP-TEE is a Trusted Execution Environment (TEE) designed as companion ...)
TODO: check
CVE-2026-40859 (Deserialization of Untrusted Data vulnerability in Apache Camel. The ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-40257 (OP-TEE is a Trusted Execution Environment (TEE) designed as companion ...)
TODO: check
CVE-2026-40141 (A high-severity vulnerability exists in a web application component of ...)
- TODO: check
+ NOT-FOR-US: BeyondTrust
CVE-2026-40140 (BeyondTrust Remote Support and Privileged Remote Access contain a high ...)
- TODO: check
+ NOT-FOR-US: BeyondTrust
CVE-2026-40139 (A critical pre-authentication vulnerability exists in the authenticati ...)
- TODO: check
+ NOT-FOR-US: BeyondTrust
CVE-2026-40138 (A critical pre-authentication vulnerability exists in the authenticati ...)
- TODO: check
+ NOT-FOR-US: BeyondTrust
CVE-2026-40047 (Improper Neutralization of Argument Delimiters in a Command ('Argument ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-24014 (Apache IoTDB DataNode\u2019s internal RPC interface for creating Trigg ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-24013 (Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certa ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-24012 (Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-1433 (uniFLOW Universal Login Manager (ULM) Standalone contains an informati ...)
- TODO: check
+ NOT-FOR-US: Canon
CVE-2026-14809 (Prog Management System developed by PROG MIS has a SQL Injection vulne ...)
TODO: check
CVE-2026-14808 (Prog Management System developed by PROG MIS has a Exposure of Sensi ...)
@@ -163,19 +163,19 @@ CVE-2026-13753 (A missing authorization vulnerability exists in the embedded web
CVE-2026-12686 (An authenticated user could manipulate a company ID parameter in a POS ...)
TODO: check
CVE-2026-12154 (The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-12083 (The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11962 (The FileOrganizer WordPress plugin before 1.2.0 does not validate the ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11855 (The Simple Membership WordPress plugin before 4.7.5 does not verify th ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-11766 (The Ultimate Member WordPress plugin before 2.12.0 does not properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-10830 (The AllCoach WordPress plugin before 1.0.2 does not verify that an em ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-8591 (The software accepts user-supplied input via a URL parameter without a ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2025-53831 (DrawIO for ownCloud is an application for using DrawIO with the file s ...)
TODO: check
CVE-2025-53830 (Anti-Virus for ownCloud is an anti-virus application for file storage, ...)
@@ -191,7 +191,7 @@ CVE-2025-15668 (A vulnerability was identified in GPAC up to b40ce70f5. This iss
CVE-2025-15667 (A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerabili ...)
TODO: check
CVE-2024-6228 (The Notifications for Forms & WordPress Actions WordPress plugin befor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-XXXX [RUSTSEC-2026-0190]
- rust-anyhow <unfixed> (bug #1141593)
NOTE: https://rustsec.org/advisories/RUSTSEC-2026-0190.html
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56e70a81138e515203c7cbe23e679ad2fc23ba66
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56e70a81138e515203c7cbe23e679ad2fc23ba66
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260706/89379b53/attachment.htm>
More information about the debian-security-tracker-commits
mailing list