[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Jul 13 20:14:11 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7cfb742e by security tracker role at 2026-07-13T19:14:05+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9,7 +9,7 @@ CVE-2026-9597 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4 fail to ve
CVE-2026-9571 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
TODO: check
CVE-2026-6875 (ServiceNow has addressed a remote code execution vulnerability that wa ...)
- TODO: check
+ NOT-FOR-US: ServiceNow
CVE-2026-6850 (Mattermost versions 11.7.x <= 11.7.2, 11.6.x <= 11.6.4, 10.11.x <= 10. ...)
TODO: check
CVE-2026-6847 (Remote Code Execution vulnerability exists in ThemisNETPanel due to mi ...)
@@ -21,29 +21,29 @@ CVE-2026-62147 (The Tempo Operator's gateway component failed to consistently ap
CVE-2026-62143 (A Server-Side Request Forgery (SSRF) protection bypass existed in the ...)
TODO: check
CVE-2026-61985 (Missing Authorization vulnerability in magepeopleteam Car Rental Manag ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61983 (Missing Authorization vulnerability in andy_moyle Church Admin church- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61977 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61976 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61975 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61971 (Authorization Bypass Through User-Controlled Key vulnerability in Cozm ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61970 (Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Fea ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61968 (Missing Authorization vulnerability in Saad Iqbal myCred mycred allows ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61958 (Missing Authorization vulnerability in Saad Iqbal License Manager for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61956 (Cross-Site Request Forgery (CSRF) vulnerability in hamsalam \u0648\u06 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61955 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61952 (Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-61692
REJECTED
CVE-2026-61505 (Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang ...)
@@ -69,15 +69,15 @@ CVE-2026-60121 (Vitec Flamingo 4.12.2 contains an unauthenticated OS command inj
CVE-2026-60103 (Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerabili ...)
TODO: check
CVE-2026-59523 (Missing Authorization vulnerability in NSquared Simply Schedule Appoin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59521 (Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Re ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59518 (Deserialization of Untrusted Data vulnerability in wpWax Directorist d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59516 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59515 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-59245 (In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` ...)
TODO: check
CVE-2026-58228 (Cross-site scripting vulnerability in phoenixframework phoenix_live_vi ...)
@@ -85,277 +85,277 @@ CVE-2026-58228 (Cross-site scripting vulnerability in phoenixframework phoenix_l
CVE-2026-58065 (The Apache Airflow Git provider runs its git-over-SSH operations with ...)
TODO: check
CVE-2026-57830 (The Joomla extension Helix Ultimate is vulnerable to an unauthenticate ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-57829 (The Joomla extension Helix Ultimate is vulnerable to an unauthenticate ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-57816 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57815 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57814 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57813 (Incorrect Privilege Assignment vulnerability in properfraction MailOpt ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57812 (Missing Authorization vulnerability in NSquared Simply Schedule Appoin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57811 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57810 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57805 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57804 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57803 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57802 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57801 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57800 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57799 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57798 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57797 (Missing Authorization vulnerability in ThemeMove EduMall edumall allow ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57796 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57795 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57794 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57793 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57792 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57791 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57790 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57789 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57788 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57787 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57786 (Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScou ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57783 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57782 (Missing Authorization vulnerability in PressTigers Universal Clocks un ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57781 (Missing Authorization vulnerability in Sovlix MeetingHub meetinghub al ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57780 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57779 (Missing Authorization vulnerability in themebeez Fascinate fascinate a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57778 (Missing Authorization vulnerability in wpdevart Booking calendar, Appo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57776 (Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57774 (Missing Authorization vulnerability in vowelweb VW Food Corner vw-food ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57773 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57772 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57771 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57770 (Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Ph ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57768 (Incorrect Privilege Assignment vulnerability in favethemes Houzez Logi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57745 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57744 (Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57743 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57741 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57740 (Missing Authorization vulnerability in AcyMailing Newsletter Team AcyM ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57739 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57738 (Deserialization of Untrusted Data vulnerability in axiomthemes 777 tri ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57734 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57733 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57732 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57729 (Missing Authorization vulnerability in UX-themes Flatsome flatsome all ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57728 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57727 (Missing Authorization vulnerability in Themeum Kirki kirki allows Expl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57726 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57725 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57724 (Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57719 (Unrestricted Upload of File with Dangerous Type vulnerability in CodeR ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57718 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57715 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57714 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57713 (Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57712 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57711 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57710 (Unrestricted Upload of File with Dangerous Type vulnerability in quant ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57709 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57708 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57707 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57706 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57705 (Missing Authorization vulnerability in Nexcess Event Tickets event-tic ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57702 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57698 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57697 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57695 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57694 (Authorization Bypass Through User-Controlled Key vulnerability in Them ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57693 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57691 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57668 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57433 (Storable versions before 3.41 for Perl have a signed integer overflow ...)
TODO: check
CVE-2026-57432 (Perl versions through 5.43.10 have an integer overflow in S_measure_st ...)
TODO: check
CVE-2026-57424 (Missing Authorization vulnerability in knitpay Razorpay Payment Links ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57423 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57422 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57421 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57420 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57419 (Missing Authorization vulnerability in Fahad Mahmood Stock Locations f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57418 (Missing Authorization vulnerability in BoldGrid Client Invoicing by Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57417 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57416 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57415 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57414 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57413 (Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57412 (Missing Authorization vulnerability in Codemenschen Gift Vouchers gift ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57411 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57410 (Incorrect Privilege Assignment vulnerability in MailerPress Team Maile ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57409 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57408 (Missing Authorization vulnerability in peachpayments Peach Payments Ga ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57407 (Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Gene ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57406 (Missing Authorization vulnerability in Roxnor FundEngine wp-fundraisin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57405 (Missing Authorization vulnerability in themehunk Open Shop open-shop a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57404 (Missing Authorization vulnerability in magepeopleteam Booking and Rent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57403 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57402 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57401 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57400 (Missing Authorization vulnerability in WP Swings Event Tickets Manager ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57399 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57398 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57396 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57395 (Missing Authorization vulnerability in Themefic Tourfic tourfic allows ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57394 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57393 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57392 (Missing Authorization vulnerability in Themefic Tourfic tourfic allows ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57391 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57390 (Missing Authorization vulnerability in EDGARROJAS Extra Product Option ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57389 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57388 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57387 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57386 (Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ab ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57385 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57383 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57382 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57381 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57380 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57379 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57378 (Missing Authorization vulnerability in Phil Kurth Advanced Forms advan ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57377 (Missing Authorization vulnerability in WPXPO WowAddons product-addons ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57376 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57375 (Missing Authorization vulnerability in FluxBuilder MStore API mstore-a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57372 (Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Bas ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57371 (Deserialization of Untrusted Data vulnerability in denishua WPJAM Basi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57369 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57368 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57365 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57364 (Improper Validation of Specified Quantity in Input vulnerability in WP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-57363 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-55772 (CedarJava is an open source Java implementation of the Cedar policy la ...)
TODO: check
CVE-2026-53365 (In the Linux kernel, the following vulnerability has been resolved: v ...)
@@ -375,9 +375,9 @@ CVE-2026-49970 (Laravel-Mediable before 7.0.0 contains a path traversal vulnerab
CVE-2026-49969 (Laravel-Mediable before 7.0.0 contains a server-side request forgery v ...)
TODO: check
CVE-2026-49876 (Authenticated SSRF in Gravitino JobManager allows server-side HTTP req ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-41041 (URL path injection via unencoded user-supplied identifiers vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-40553 (Buffer overflow vulnerability has been found in "extension/readdir.c" ...)
TODO: check
CVE-2026-40469 (Integer overflow vulnerability has been found in "builtin.c" program f ...)
@@ -411,9 +411,9 @@ CVE-2026-15584 (A privilege escalation vulnerability was found in the incluster-
CVE-2026-15574 (A flaw was found in the vllm-orchestrator-gateway component. The syste ...)
TODO: check
CVE-2026-15559 (A vulnerability was detected in CodeAstro Simple Online Leave Manageme ...)
- TODO: check
+ NOT-FOR-US: CodeAstro
CVE-2026-15558 (A security vulnerability has been detected in CodeAstro Simple Online ...)
- TODO: check
+ NOT-FOR-US: CodeAstro
CVE-2026-15557 (A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affecte ...)
TODO: check
CVE-2026-15548 (A security vulnerability has been detected in Shibby Tomato up to 1.28 ...)
@@ -427,13 +427,13 @@ CVE-2026-15545 (A vulnerability was identified in Shibby Tomato up to 1.28.0000.
CVE-2026-15544 (A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affec ...)
TODO: check
CVE-2026-15543 (A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the func ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2026-15542 (A vulnerability has been found in will-moss Isaiah up to 1.36.9. This ...)
TODO: check
CVE-2026-15541 (A flaw has been found in will-moss Isaiah up to 1.36.9. The impacted e ...)
TODO: check
CVE-2026-15540 (A vulnerability was detected in SourceCodester Online Book Store Syste ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-14934 (A Missing Authorization vulnerability in the repository creation funct ...)
TODO: check
CVE-2026-14906 (Pages with malicious titles could potentially allow saved PDF content ...)
@@ -441,9 +441,9 @@ CVE-2026-14906 (Pages with malicious titles could potentially allow saved PDF co
CVE-2026-14846 (In version 8.2.1 of PrestaShop, there is a vulnerability relating to t ...)
TODO: check
CVE-2026-14453 (This vulnerability is a critical Server-Side Template Injection (SSTI) ...)
- TODO: check
+ NOT-FOR-US: Centreon
CVE-2026-14165 (An Authorization Bypass Through User-Controlled Key vulnerability affe ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-13221 (Perl versions through 5.43.9 produce silently incorrect regular expres ...)
TODO: check
CVE-2026-13014 (A vulnerability inThales CERT "Suspicious" application =< 1.3.4 allows ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cfb742e20a8ade99dbdfd14ea33b80e8499f91f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7cfb742e20a8ade99dbdfd14ea33b80e8499f91f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260713/208bfa44/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list