[Git][security-tracker-team/security-tracker][master] Process some new NFUs

Tue Jul 14 08:18:09 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4a64963b by Salvatore Bonaccorso at 2026-07-14T09:17:42+02:00
Process some new NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,15 +1,15 @@
 CVE-2026-7640 (The WP Customer Area plugin for WordPress is vulnerable to Stored Cros ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-62328 (9Router through version 0.4.41 contain an unauthenticated information  ...)
-	TODO: check
+	NOT-FOR-US: 9Router
 CVE-2026-62327 (9Router through version 0.4.41 contain an unauthenticated information  ...)
-	NOT-FOR-US: Next.js
+	NOT-FOR-US: 9Router
 CVE-2026-62242 (Spring Boot Admin Server before 4.1.2 contains a server-side request f ...)
 	TODO: check
 CVE-2026-62240 (CrewAI before 1.15.1 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: CrewAI
 CVE-2026-62239 (FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains  ...)
-	TODO: check
+	NOT-FOR-US: FlashAttention
 CVE-2026-62200 (OpenClaw versions before 2026.6.1 contain a flaw in host exec environm ...)
 	NOT-FOR-US: OpenClaw
 CVE-2026-62199 (OpenClaw versions before 2026.6.6 contain a flaw in host exec environm ...)
@@ -43,21 +43,21 @@ CVE-2026-62186 (OpenClaw versions before 2026.6.8 contain an authorization bypas
 CVE-2026-62185 (Argo CD Helm Chart before 10.0.0 fails to install network policies by  ...)
 	NOT-FOR-US: Argo CD
 CVE-2026-62184 (luci-app-banip contains a log parsing vulnerability where the awk-base ...)
-	TODO: check
+	NOT-FOR-US: luci-app-banip
 CVE-2026-61458 (PasswordPusher before 2.9.2 contains a brute-force vulnerability in th ...)
-	TODO: check
+	NOT-FOR-US: PasswordPusher
 CVE-2026-59801 (9Router through version 0.4.41 contains an unauthenticated access vuln ...)
-	NOT-FOR-US: Next.js
+	NOT-FOR-US: 9Router
 CVE-2026-58500 (MCP Appium is an MCP server that provides AI assistants with tools to  ...)
-	TODO: check
+	NOT-FOR-US: MCP Appium
 CVE-2026-58489 (HedgeDoc is an open source, real-time collaborative markdown notes app ...)
-	TODO: check
+	NOT-FOR-US: HedgeDoc
 CVE-2026-58488 (HedgeDoc is an open source, real-time, collaborative, markdown notes a ...)
-	TODO: check
+	NOT-FOR-US: HedgeDoc
 CVE-2026-58487 (HedgeDoc is an open source, real-time, collaborative, markdown notes a ...)
-	TODO: check
+	NOT-FOR-US: HedgeDoc
 CVE-2026-58486 (HedgeDoc is an open source, real-time, collaborative, markdown notes a ...)
-	TODO: check
+	NOT-FOR-US: HedgeDoc
 CVE-2026-58411 (ChurchCRM is an open-source church management system. Prior to version ...)
 	NOT-FOR-US: ChurchCRM
 CVE-2026-58410 (ChurchCRM is an open-source church management system. Prior to version ...)
@@ -71,31 +71,31 @@ CVE-2026-58407
 CVE-2026-58233 (SAP Change and Transport System Attach Tool (ctsattach) allows an auth ...)
 	NOT-FOR-US: SAP
 CVE-2026-57856 (Cockpit CMS contains a path traversal vulnerability in the Bucket file ...)
-	TODO: check
+	NOT-FOR-US: Cockpit CMS
 CVE-2026-57855 (Cockpit CMS contains a missing authorization vulnerability in the Buck ...)
-	TODO: check
+	NOT-FOR-US: Cockpit CMS
 CVE-2026-56877 (The SCORM lab launch endpoint in Skillable (scorm.skillable.com) throu ...)
 	TODO: check
 CVE-2026-55773 (CedarJava is an open source Java implementation of the Cedar policy la ...)
-	TODO: check
+	NOT-FOR-US: CedarJava
 CVE-2026-55771 (CedarJava is an open source Java implementation of the Cedar policy la ...)
-	TODO: check
+	NOT-FOR-US: CedarJava
 CVE-2026-52533 (An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker t ...)
 	NOT-FOR-US: D-Link
 CVE-2026-51821 (SQL Injection vulnerability in Shenzhou Shihan Video Conference System ...)
-	TODO: check
+	NOT-FOR-US: Shenzhou Shihan Video Conference System
 CVE-2026-51541 (OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP m ...)
-	TODO: check
+	NOT-FOR-US: OpENer
 CVE-2026-51540 (OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a s ...)
-	TODO: check
+	NOT-FOR-US: OpENer
 CVE-2026-51539 (A Denial of Service (DoS) vulnerability exists in the receive loop of  ...)
-	TODO: check
+	NOT-FOR-US: OpENer
 CVE-2026-51538 (EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect  ...)
-	TODO: check
+	NOT-FOR-US: OpENer
 CVE-2026-51537 (EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read  ...)
-	TODO: check
+	NOT-FOR-US: OpENer
 CVE-2026-51536 (In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Ind ...)
-	TODO: check
+	NOT-FOR-US: OpENer
 CVE-2026-48364 (ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unc ...)
 	NOT-FOR-US: Adobe
 CVE-2026-48363 (ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a64963b12c91c53eb44f2c3ca34c92ec392d85b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a64963b12c91c53eb44f2c3ca34c92ec392d85b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260714/0125f46a/attachment-0001.htm>
