[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Jul 13 20:13:20 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2031b4bc by security tracker role at 2026-07-13T19:13:13+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,463 @@
+CVE-2026-9824 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-9820 (Mattermost versions 11.7.x <= 11.7.2, 10.11.x <= 10.11.19 fail to sani ...)
+ TODO: check
+CVE-2026-9708 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-9597 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to verify ...)
+ TODO: check
+CVE-2026-9571 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-6875 (ServiceNow has addressed a remote code execution vulnerability that wa ...)
+ TODO: check
+CVE-2026-6850 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-6847 (Remote Code Execution vulnerability exists in ThemisNETPanel due to mi ...)
+ TODO: check
+CVE-2026-6541 (Mattermost versions 11.7.x <= 11.7.1, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-62147 (The Tempo Operator's gateway component failed to consistently apply na ...)
+ TODO: check
+CVE-2026-62143 (A Server-Side Request Forgery (SSRF) protection bypass existed in the ...)
+ TODO: check
+CVE-2026-61985 (Missing Authorization vulnerability in magepeopleteam Car Rental Manag ...)
+ TODO: check
+CVE-2026-61983 (Missing Authorization vulnerability in andy_moyle Church Admin church- ...)
+ TODO: check
+CVE-2026-61977 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
+ TODO: check
+CVE-2026-61976 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
+ TODO: check
+CVE-2026-61975 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
+ TODO: check
+CVE-2026-61971 (Authorization Bypass Through User-Controlled Key vulnerability in Cozm ...)
+ TODO: check
+CVE-2026-61970 (Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Fea ...)
+ TODO: check
+CVE-2026-61968 (Missing Authorization vulnerability in Saad Iqbal myCred mycred allows ...)
+ TODO: check
+CVE-2026-61958 (Missing Authorization vulnerability in Saad Iqbal License Manager for ...)
+ TODO: check
+CVE-2026-61956 (Cross-Site Request Forgery (CSRF) vulnerability in hamsalam \u0648\u06 ...)
+ TODO: check
+CVE-2026-61955 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-61952 (Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit ...)
+ TODO: check
+CVE-2026-61692
+ REJECTED
+CVE-2026-61505 (Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang ...)
+ TODO: check
+CVE-2026-61504 (Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fall ...)
+ TODO: check
+CVE-2026-61503 (Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses ...)
+ TODO: check
+CVE-2026-61502 (Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests vi ...)
+ TODO: check
+CVE-2026-61501 (Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administrat ...)
+ TODO: check
+CVE-2026-61500 (Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key ...)
+ TODO: check
+CVE-2026-61498 (Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection ...)
+ TODO: check
+CVE-2026-61463 (Shiori contains a privilege escalation vulnerability in the account up ...)
+ TODO: check
+CVE-2026-61462 (mcp-gitlab contains a path traversal vulnerability in the job_id param ...)
+ TODO: check
+CVE-2026-60121 (Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection ...)
+ TODO: check
+CVE-2026-60103 (Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerabili ...)
+ TODO: check
+CVE-2026-59523 (Missing Authorization vulnerability in NSquared Simply Schedule Appoin ...)
+ TODO: check
+CVE-2026-59521 (Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Re ...)
+ TODO: check
+CVE-2026-59518 (Deserialization of Untrusted Data vulnerability in wpWax Directorist d ...)
+ TODO: check
+CVE-2026-59516 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-59515 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-59245 (In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` ...)
+ TODO: check
+CVE-2026-58228 (Cross-site scripting vulnerability in phoenixframework phoenix_live_vi ...)
+ TODO: check
+CVE-2026-58065 (The Apache Airflow Git provider runs its git-over-SSH operations with ...)
+ TODO: check
+CVE-2026-57830 (The Joomla extension Helix Ultimate is vulnerable to an unauthenticate ...)
+ TODO: check
+CVE-2026-57829 (The Joomla extension Helix Ultimate is vulnerable to an unauthenticate ...)
+ TODO: check
+CVE-2026-57816 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57815 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-57814 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57813 (Incorrect Privilege Assignment vulnerability in properfraction MailOpt ...)
+ TODO: check
+CVE-2026-57812 (Missing Authorization vulnerability in NSquared Simply Schedule Appoin ...)
+ TODO: check
+CVE-2026-57811 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
+ TODO: check
+CVE-2026-57810 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57805 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57804 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57803 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57802 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57801 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57800 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57799 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57798 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57797 (Missing Authorization vulnerability in ThemeMove EduMall edumall allow ...)
+ TODO: check
+CVE-2026-57796 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57795 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57794 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57793 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57792 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57791 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57790 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57789 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57788 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57787 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57786 (Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScou ...)
+ TODO: check
+CVE-2026-57783 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57782 (Missing Authorization vulnerability in PressTigers Universal Clocks un ...)
+ TODO: check
+CVE-2026-57781 (Missing Authorization vulnerability in Sovlix MeetingHub meetinghub al ...)
+ TODO: check
+CVE-2026-57780 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57779 (Missing Authorization vulnerability in themebeez Fascinate fascinate a ...)
+ TODO: check
+CVE-2026-57778 (Missing Authorization vulnerability in wpdevart Booking calendar, Appo ...)
+ TODO: check
+CVE-2026-57776 (Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding ...)
+ TODO: check
+CVE-2026-57774 (Missing Authorization vulnerability in vowelweb VW Food Corner vw-food ...)
+ TODO: check
+CVE-2026-57773 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57772 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57771 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57770 (Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Ph ...)
+ TODO: check
+CVE-2026-57768 (Incorrect Privilege Assignment vulnerability in favethemes Houzez Logi ...)
+ TODO: check
+CVE-2026-57745 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57744 (Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 ...)
+ TODO: check
+CVE-2026-57743 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
+ TODO: check
+CVE-2026-57741 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57740 (Missing Authorization vulnerability in AcyMailing Newsletter Team AcyM ...)
+ TODO: check
+CVE-2026-57739 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57738 (Deserialization of Untrusted Data vulnerability in axiomthemes 777 tri ...)
+ TODO: check
+CVE-2026-57734 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57733 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57732 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57729 (Missing Authorization vulnerability in UX-themes Flatsome flatsome all ...)
+ TODO: check
+CVE-2026-57728 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57727 (Missing Authorization vulnerability in Themeum Kirki kirki allows Expl ...)
+ TODO: check
+CVE-2026-57726 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57725 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57724 (Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki ...)
+ TODO: check
+CVE-2026-57719 (Unrestricted Upload of File with Dangerous Type vulnerability in CodeR ...)
+ TODO: check
+CVE-2026-57718 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57715 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57714 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57713 (Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes ...)
+ TODO: check
+CVE-2026-57712 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57711 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57710 (Unrestricted Upload of File with Dangerous Type vulnerability in quant ...)
+ TODO: check
+CVE-2026-57709 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-57708 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57707 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57706 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57705 (Missing Authorization vulnerability in Nexcess Event Tickets event-tic ...)
+ TODO: check
+CVE-2026-57702 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57698 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
+ TODO: check
+CVE-2026-57697 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
+ TODO: check
+CVE-2026-57695 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57694 (Authorization Bypass Through User-Controlled Key vulnerability in Them ...)
+ TODO: check
+CVE-2026-57693 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57691 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57668 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57433 (Storable versions before 3.41 for Perl have a signed integer overflow ...)
+ TODO: check
+CVE-2026-57432 (Perl versions through 5.43.10 have an integer overflow in S_measure_st ...)
+ TODO: check
+CVE-2026-57424 (Missing Authorization vulnerability in knitpay Razorpay Payment Links ...)
+ TODO: check
+CVE-2026-57423 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57422 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57421 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57420 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57419 (Missing Authorization vulnerability in Fahad Mahmood Stock Locations f ...)
+ TODO: check
+CVE-2026-57418 (Missing Authorization vulnerability in BoldGrid Client Invoicing by Sp ...)
+ TODO: check
+CVE-2026-57417 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57416 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57415 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57414 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57413 (Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant I ...)
+ TODO: check
+CVE-2026-57412 (Missing Authorization vulnerability in Codemenschen Gift Vouchers gift ...)
+ TODO: check
+CVE-2026-57411 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57410 (Incorrect Privilege Assignment vulnerability in MailerPress Team Maile ...)
+ TODO: check
+CVE-2026-57409 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57408 (Missing Authorization vulnerability in peachpayments Peach Payments Ga ...)
+ TODO: check
+CVE-2026-57407 (Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Gene ...)
+ TODO: check
+CVE-2026-57406 (Missing Authorization vulnerability in Roxnor FundEngine wp-fundraisin ...)
+ TODO: check
+CVE-2026-57405 (Missing Authorization vulnerability in themehunk Open Shop open-shop a ...)
+ TODO: check
+CVE-2026-57404 (Missing Authorization vulnerability in magepeopleteam Booking and Rent ...)
+ TODO: check
+CVE-2026-57403 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57402 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57401 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-57400 (Missing Authorization vulnerability in WP Swings Event Tickets Manager ...)
+ TODO: check
+CVE-2026-57399 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57398 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57396 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57395 (Missing Authorization vulnerability in Themefic Tourfic tourfic allows ...)
+ TODO: check
+CVE-2026-57394 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57393 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
+ TODO: check
+CVE-2026-57392 (Missing Authorization vulnerability in Themefic Tourfic tourfic allows ...)
+ TODO: check
+CVE-2026-57391 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57390 (Missing Authorization vulnerability in EDGARROJAS Extra Product Option ...)
+ TODO: check
+CVE-2026-57389 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-57388 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57387 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57386 (Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ab ...)
+ TODO: check
+CVE-2026-57385 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
+ TODO: check
+CVE-2026-57383 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57382 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57381 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57380 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57379 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57378 (Missing Authorization vulnerability in Phil Kurth Advanced Forms advan ...)
+ TODO: check
+CVE-2026-57377 (Missing Authorization vulnerability in WPXPO WowAddons product-addons ...)
+ TODO: check
+CVE-2026-57376 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57375 (Missing Authorization vulnerability in FluxBuilder MStore API mstore-a ...)
+ TODO: check
+CVE-2026-57372 (Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Bas ...)
+ TODO: check
+CVE-2026-57371 (Deserialization of Untrusted Data vulnerability in denishua WPJAM Basi ...)
+ TODO: check
+CVE-2026-57369 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57368 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57365 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57364 (Improper Validation of Specified Quantity in Input vulnerability in WP ...)
+ TODO: check
+CVE-2026-57363 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-55772 (CedarJava is an open source Java implementation of the Cedar policy la ...)
+ TODO: check
+CVE-2026-53365 (In the Linux kernel, the following vulnerability has been resolved: v ...)
+ TODO: check
+CVE-2026-53364 (In the Linux kernel, the following vulnerability has been resolved: B ...)
+ TODO: check
+CVE-2026-4769 (Certain devices in the WAGO System I/O Field series activate an intern ...)
+ TODO: check
+CVE-2026-4765 (Stored Cross-Site Scripting (XSS) vulnerability in the RD Station Conv ...)
+ TODO: check
+CVE-2026-49972 (Laravel-Mediable before 7.0.0 contains a file upload vulnerability tha ...)
+ TODO: check
+CVE-2026-49971 (Laravel-Mediable before 7.0.0 contains a stored cross-site scripting v ...)
+ TODO: check
+CVE-2026-49970 (Laravel-Mediable before 7.0.0 contains a path traversal vulnerability ...)
+ TODO: check
+CVE-2026-49969 (Laravel-Mediable before 7.0.0 contains a server-side request forgery v ...)
+ TODO: check
+CVE-2026-49876 (Authenticated SSRF in Gravitino JobManager allows server-side HTTP req ...)
+ TODO: check
+CVE-2026-41041 (URL path injection via unencoded user-supplied identifiers vulnerabili ...)
+ TODO: check
+CVE-2026-40553 (Buffer overflow vulnerability has been found in "extension/readdir.c" ...)
+ TODO: check
+CVE-2026-40469 (Integer overflow vulnerability has been found in "builtin.c" program f ...)
+ TODO: check
+CVE-2026-40468 (Integer overflow vulnerability has been found in "builtin.c" program f ...)
+ TODO: check
+CVE-2026-40467 (Use After Free vulnerability has been found in "io.c" program file of ...)
+ TODO: check
+CVE-2026-26396 (OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in th ...)
+ TODO: check
+CVE-2026-22103 (The NPC start endpoint on the web server at port 8090 is vulnerable to ...)
+ TODO: check
+CVE-2026-22102 (A POST request sent to a specific webserver endpoint can be used to wr ...)
+ TODO: check
+CVE-2026-22100 (The OCPP DataTransfer message `ReserveLogin` is vulnerable to command ...)
+ TODO: check
+CVE-2026-22099 (The charging station does not require authentication for Bluetooth com ...)
+ TODO: check
+CVE-2026-22098 (Various sensitive information such as passwords and charging card UIDs ...)
+ TODO: check
+CVE-2026-22097 (The firmware update mechanism does not include cryptographic signature ...)
+ TODO: check
+CVE-2026-22096 (The webserver running on port 8090 does not require authentication. Th ...)
+ TODO: check
+CVE-2026-22095 (The network diagnosis endpoint on the web server at port 8090 is vulne ...)
+ TODO: check
+CVE-2026-22093 (The EVbee Service Android app uses TLS encrypted communication (HTTPS) ...)
+ TODO: check
+CVE-2026-15584 (A privilege escalation vulnerability was found in the incluster-checks ...)
+ TODO: check
+CVE-2026-15574 (A flaw was found in the vllm-orchestrator-gateway component. The syste ...)
+ TODO: check
+CVE-2026-15559 (A vulnerability was detected in CodeAstro Simple Online Leave Manageme ...)
+ TODO: check
+CVE-2026-15558 (A security vulnerability has been detected in CodeAstro Simple Online ...)
+ TODO: check
+CVE-2026-15557 (A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affecte ...)
+ TODO: check
+CVE-2026-15548 (A security vulnerability has been detected in Shibby Tomato up to 1.28 ...)
+ TODO: check
+CVE-2026-15547 (A weakness has been identified in Shibby Tomato up to 1.28.0000. This ...)
+ TODO: check
+CVE-2026-15546 (A security flaw has been discovered in Shibby Tomato up to 1.28.0000. ...)
+ TODO: check
+CVE-2026-15545 (A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affec ...)
+ TODO: check
+CVE-2026-15544 (A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affec ...)
+ TODO: check
+CVE-2026-15543 (A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the func ...)
+ TODO: check
+CVE-2026-15542 (A vulnerability has been found in will-moss Isaiah up to 1.36.9. This ...)
+ TODO: check
+CVE-2026-15541 (A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted e ...)
+ TODO: check
+CVE-2026-15540 (A vulnerability was detected in SourceCodester Online Book Store Syste ...)
+ TODO: check
+CVE-2026-14934 (A Missing Authorization vulnerability in the repository creation funct ...)
+ TODO: check
+CVE-2026-14906 (Pages with malicious titles could potentially allow saved PDF content ...)
+ TODO: check
+CVE-2026-14846 (In version 8.2.1 of PrestaShop, there is a vulnerability relating to t ...)
+ TODO: check
+CVE-2026-14453 (This vulnerability is a critical Server-Side Template Injection (SSTI) ...)
+ TODO: check
+CVE-2026-14165 (An Authorization Bypass Through User-Controlled Key vulnerability affe ...)
+ TODO: check
+CVE-2026-13221 (Perl versions through 5.43.9 produce silently incorrect regular expres ...)
+ TODO: check
+CVE-2026-13014 (A vulnerability inThales CERT "Suspicious" application =< 1.3.4 allows ...)
+ TODO: check
+CVE-2026-12257 (Versions of Mura CMS prior to 10.0.712 contain a critical remote code ...)
+ TODO: check
+CVE-2026-10106 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-10103 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2026-10085 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
+ TODO: check
+CVE-2025-45869 (LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to ...)
+ TODO: check
CVE-2026-9492 (The MBStorage DRAM lighting control module within Gigabyte Control Cen ...)
TODO: check
CVE-2026-7162 (Successful exploitation of the integer overflow vulnerability could al ...)
@@ -758,11 +1218,13 @@ CVE-2026-56665 (ZITADEL is an open source identity management platform. Prior to
CVE-2026-56664 (ZITADEL is an open source identity management platform. Prior to 3.4.1 ...)
NOT-FOR-US: Zitadel
CVE-2026-56373 (ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in ...)
+ {DLA-4680-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4x-rwrx-xxj9
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/168ffe18def968f886c023146a478897866fd621 (7.1.2-14)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/06a0867c1f5076b85577b6b1cf87af901f6d6a84 (6.9.13-39)
CVE-2026-56366 (ImageMagick before 7.1.2-18 contains a memory leak vulnerability in th ...)
+ {DLA-4680-1}
- imagemagick 8:7.1.2.18+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9r56-3gjq-hqf7
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/bee248ee853a686a969fae9cfb1e02dd5aae245b (7.1.2-18)
@@ -5763,31 +6225,31 @@ CVE-2026-56149 (Allocation of Resources Without Limits or Throttling (CWE-770) i
CVE-2026-56148 (Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial ...)
- elasticsearch <removed>
CVE-2026-55628 (In versions prior to 7.1.2-26he, the `-concatenate` operation is missi ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-82mp-vp5c-9pf7
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/dcba7ee9ffb0c5a22a458bf0c613bc818fcb4cc6 (7.1.2-26)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/f48a0e2bad74c4cd42624e95205c3befd64062d8 (6.9.13-53)
CVE-2026-55597 (ImageMagick is free and open-source software used for editing and mani ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c4v7-w88g-m6c4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/277541927c2de8317d4167ee16d57375f24971d3 (7.1.2-26)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/d241c85d93e4684f84201bd08f4aad80eac44f4a (6.9.13-51)
CVE-2026-55595 (ImageMagick is free and open-source software used for editing and mani ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qhmf-7fc4-8q3h
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/549fdf2195bbac1c93e736c04f416d4d9a5d05a8 (7.1.2-26)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/f102ddccceb30b38dd01f9d77025f51c9a5cc272 (6.9.13-51)
CVE-2026-55594 (ImageMagick is free and open-source software used for editing and mani ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mx48-2qq3-23hf
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/c8868afaf0fe901cddb52177971de25c33f8aa02 (7.1.2-26)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/46d1c3a7d0d91bf8323deb0b29246e7e52db6778 (6.9.13-51)
CVE-2026-55577 (ImageMagick is free and open-source software used for editing and mani ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wx47-rm3x-jx6p
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/01ce608dd41fa358e212ebb66035b7257cd9d915 (7.1.2-26)
@@ -5837,13 +6299,13 @@ CVE-2026-53903 (MCO is vulnerable to an Insecure Direct Object Reference (IDOR)
CVE-2026-53902 (MCO does not properly enforce authorization checks in the /customer/se ...)
NOT-FOR-US: MyComplianceOffice MCO
CVE-2026-53467 (ImageMagick is free and open-source software used for editing and mani ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8g53-9m3c-69xg
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/9d1764c43a15b78e18a7f66649989d59079a9e15 (7.1.2-26)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/ad68aca5cd33e199f6cd3048da2ae62e76f05b74 (6.9.13-51)
CVE-2026-53466 (ImageMagick is free and open-source software used for editing and mani ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.26+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pjxj-pchx-4c3m
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/47ca7210515f3c9ea033b86fe4323a70caa74468 (7.1.2-26)
@@ -6339,7 +6801,7 @@ CVE-2026-56413 (Storage Concentrator (SC & SCVM) contains a command injection vu
CVE-2026-56399 (Open WebUI before 0.6.27 contains a server-side request forgery vulner ...)
NOT-FOR-US: Open WebUI
CVE-2026-56377 (ImageMagick before 7.1.2-24 contains an incorrect policy check that al ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.24+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3705205e1424d379c2fc46c026c8560ccea0509e (7.1.2-24)
@@ -6349,7 +6811,7 @@ CVE-2026-56369 (ImageMagick before 7.1.2-22 contains an information disclosure v
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5
NOTE: Fixed by documentation upgrade https://github.com/ImageMagick/ImageMagick/issues/8837#event-27569522488
CVE-2026-56365 (ImageMagick before 7.1.2-19 contains a memory leak vulnerability in th ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.19+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x928-4434-crqj
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/ca761f220bbf0470e2e7967639bcfb5be305ad28 (7.1.2-19)
@@ -6365,13 +6827,13 @@ CVE-2026-56364 (ImageMagick before 7.1.2-13 contains a memory leak vulnerability
NOTE: Fixed by [2/2]: https://github.com/ImageMagick/ImageMagick/commit/5fd4e5ad05a986b00e1519fa308ca3c5cf3d09d8 (7.1.2-14)
NOTE: ImageMagick function LoadOpenCLDeviceBenchmark not present in ImageMagick6
CVE-2026-56363 (ImageMagick before 7.1.2-22 contains a division by zero vulnerability ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.23+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vf33-6r7x-66xx
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/d67eef71764cfeca07b4edf8a8ae922180f5f2e4 (7.1.2-22)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/7a48e0b3107608c7d87a172473cfd5294bc9e81f (6.9.13-47)
CVE-2026-56361 (ImageMagick before 7.1.2-19 contains an off-by-one error in morphology ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.19+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q8h3-jv9v-57qx
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/a6bfb1bb7b4017ec52f5a957641d83ce29b63286 (7.1.2-19)
@@ -12646,13 +13108,13 @@ CVE-2026-57280 (Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier do
CVE-2026-56761 (hono before 4.12.14 contains an html injection vulnerability in jsx se ...)
NOT-FOR-US: Hono
CVE-2026-56370 (ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerabi ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.19+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmpg-6pww-fg6q
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/2ab24d74865ab92faeeefe0fec890abf1e88e57c (7.1.2-19)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/60b4e60841b429d719c59144e2505c8b0135367d (6.9.13-44)
CVE-2026-56368 (ImageMagick before 7.1.2-15 contains a memory leak vulnerability in mu ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wfx3-6g53-9fgc
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/fe0a49a58ac5b7a18ff2618b6207dcad71123e43 (7.1.2-14)
@@ -14505,13 +14967,13 @@ CVE-2026-56379 (ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command inj
NOTE: bookworm/bullseye fixed by backporting svg/msl coder from 6.9.13-41
NOTE: trixie fixed by backporting svg/msl to 7.1.2-16
CVE-2026-56376 (ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-fr ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2gq3-ww97-wfjm
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/f5049954f12c6fcf090a776767526d2a4708d58b (7.1.2-14)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/94062bdf70dacc9714f2ff46a5920ceac63836cf (6.9.13-39)
CVE-2026-56371 (ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in co ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3q5f-gmjc-38r8
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/e6394098af39a9689bb5f0b4eb6a9968e449a8d3 (7.1.2-14)
@@ -15694,13 +16156,13 @@ CVE-2025-71351 (picklescan before 0.0.25 fails to detect malicious pickle files
CVE-2025-71348 (picklescan before 0.0.28 fails to detect malicious pickle files that i ...)
NOT-FOR-US: picklescan
CVE-2026-56367 (ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an int ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/5b91ab69af614024255fd93dcc9a62b41fbc435c (7.1.2-14)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/f4976eb8efe87009eec7cb12f62a3abd1cef4881 (6.9.13-39)
CVE-2026-56378 (ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap ...)
- {DSA-6383-1}
+ {DSA-6383-1 DLA-4680-1}
- imagemagick 8:7.1.2.15+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/436e5d2589e3c0adc10d9aa189e81d5d088d8207 (7.1.2-14)
@@ -32355,6 +32817,7 @@ CVE-2026-2374 (The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable
CVE-2026-21785 (A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Con ...)
NOT-FOR-US: HCL
CVE-2026-48112 (7-Zip is a file archiver with a high compression ratio. Versions 9.18 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1
[trixie] - 7zip <no-dsa> (Minor issue)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
@@ -32363,6 +32826,7 @@ CVE-2026-48112 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: depending on 7zip. Mark this version as fixed version.
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
CVE-2026-48111 (7-Zip is a file archiver with a high compression ratio. Versions 9.21 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1 (unimportant)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
- p7zip 16.02+transitional.1 (unimportant)
@@ -32371,6 +32835,7 @@ CVE-2026-48111 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
NOTE: Crash in CLI tool, no security impact
CVE-2026-48104 (7-Zip is a file archiver with a high compression ratio. Versions 9.18 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1 (unimportant)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
- p7zip 16.02+transitional.1 (unimportant)
@@ -32379,6 +32844,7 @@ CVE-2026-48104 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
NOTE: Crash in CLI tool, no security impact
CVE-2026-48103 (7-Zip is a file archiver with a high compression ratio. Versions 9.34 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1 (unimportant)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
- p7zip 16.02+transitional.1 (unimportant)
@@ -32387,6 +32853,7 @@ CVE-2026-48103 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
NOTE: Crash in CLI tool, no security impact
CVE-2026-48102 (7-Zip is a file archiver with a high compression ratio. Versions 9.11 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1 (unimportant)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
- p7zip 16.02+transitional.1 (unimportant)
@@ -32395,6 +32862,7 @@ CVE-2026-48102 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
NOTE: Crash in CLI tool, no security impact
CVE-2026-48101 (7-Zip is a file archiver with a high compression ratio. Versions 9.21 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1 (unimportant)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
- p7zip 16.02+transitional.1 (unimportant)
@@ -32403,6 +32871,7 @@ CVE-2026-48101 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
NOTE: Crash in CLI tool, no security impact
CVE-2026-48092 (7-Zip is a file archiver with a high compression ratio. Versions 9.34 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1 (unimportant)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
- p7zip 16.02+transitional.1 (unimportant)
@@ -32411,6 +32880,7 @@ CVE-2026-48092 (7-Zip is a file archiver with a high compression ratio. Versions
NOTE: https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/
NOTE: Crash in CLI tool, no security impact
CVE-2026-48095 (7-Zip is a file archiver with a high compression ratio. Versions 26.00 ...)
+ {DLA-4681-1}
- 7zip 26.01+dfsg-1
[trixie] - 7zip <no-dsa> (Minor issue)
[bookworm] - 7zip 22.01+really26.01+dfsg-0+deb12u1
@@ -74671,7 +75141,7 @@ CVE-2025-46598 (Bitcoin Core through 29.0 allows a denial of service via a craft
- bitcoin <removed>
CVE-2025-46597 (Bitcoin Core 0.13.0 through 29.x has an integer overflow.)
- bitcoin <removed>
-CVE-2025-15608 (This vulnerability in AX53 v1 results from insufficient input sanitiza ...)
+CVE-2025-15608 (This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insu ...)
NOT-FOR-US: TPLink
CVE-2025-15607 (A command injection vulnerability on AX53 v1 occurs in mscd debug func ...)
NOT-FOR-US: TPLink
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2031b4bc05aae40e653d3f0c79740f0bd62ff931
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2031b4bc05aae40e653d3f0c79740f0bd62ff931
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260713/0a559d7c/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list