[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jul 29 08:13:35 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ea649b8a by security tracker role at 2026-07-29T07:13:29+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41,7 +41,7 @@ CVE-2026-63227 (An unrestricted SCORM file upload vulnerability in Koollab LMS a
 CVE-2026-62325 (goshs is a feature-rich single-binary file server for red teamers and  ...)
 	TODO: check
 CVE-2026-5626 (The Survey Form Block plugin for WordPress is vulnerable to unauthoriz ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-59943 (Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior ...)
 	TODO: check
 CVE-2026-59942 (Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior ar ...)
@@ -105,99 +105,99 @@ CVE-2026-48060 (Litestar is an Asynchronous Server Gateway Interface (ASGI) fram
 CVE-2026-47219 (find-my-way is a framework-independent HTTP router that internally use ...)
 	TODO: check
 CVE-2026-3158 (IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-3157 (IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-1918 (IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-18072 (The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vi ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-17166 (The Event Booking Manager for WooCommerce \u2013 Sell Tickets, Event R ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-17162 (The WowStore \u2013 Store Builder & Product Blocks for WooCommerce plu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-17161 (The WowStore \u2013 Store Builder & Product Blocks for WooCommerce plu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-16581 (In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclus ...)
 	TODO: check
 CVE-2026-16347 (MikroTik RouterOS contains a weakness in its API authentication handli ...)
-	TODO: check
+	NOT-FOR-US: MikroTik
 CVE-2026-16192 (IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 i ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-16184 (IBM WebSphere Application Server 9.0, and 8.5 could allow a remote att ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-16107 (IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validat ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-15735 (The Contact Form to Any API plugin for WordPress is vulnerable to Stor ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-15344 (The WP Photo Album Plus plugin for WordPress is vulnerable to generic  ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-15328 (IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Applic ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-15325 (IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Applic ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-15280 (IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 N ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-15064 (IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Applic ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-15057 (IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 i ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14996 (IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14981 (IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Applic ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14976 (IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 i ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14974 (IBM WebSphere Application Server 8.5, and 9.0 traditional could allow  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14973 (IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14959 (IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authen ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14958 (IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authen ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14893 (IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 I ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14528 (IBM WebSphere Application Server 9.0, and 8.5 traditional could allow  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14515 (IBM WebSphere Application Server 8.5, and 9.0 traditional could allow  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14512 (IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerabl ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14446 (IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken  ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-14300 (The miniOrange Social Login and Register (Discord, Google, Twitter, Li ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-14234 (The WOLF  WordPress plugin before 1.1.0 does not perform a nonce or ca ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-14224 (The Easy Appointments WordPress plugin through 3.12.26 does not verify ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-13692 (The PayU CommercePro Plugin WordPress plugin through 3.8.9 does not ve ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-13690 (The UsersWP  WordPress plugin before 1.2.67 does not validate the sele ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-13605 (The PhotoSwipe WordPress plugin through 4.1.1.1 uses the title attribu ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-13463 (IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain se ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-13442 (IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse a ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2026-13423 (The Streamit WordPress theme through 4.5.0 does not perform any author ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-12939 (The Newsletters Lite plugin for WordPress is vulnerable to Stored Cros ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-12938 (The Newsletters Lite plugin for WordPress is vulnerable to Stored Cros ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-12476 (The Easy Digital Downloads plugin for WordPress is vulnerable to Arbit ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-12144 (The Wholesale for WooCommerce plugin for WordPress is vulnerable to Pr ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-11974 (The wp-media-folder-addon WordPress plugin through 4.1.6 does not vali ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-11391 (Tanium addressed a SQL injection vulnerability in Patch.)
-	TODO: check
+	NOT-FOR-US: Tanium
 CVE-2026-11351 (The ShinyStat Analytics WordPress plugin before 1.0.17 does not perfor ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin
 CVE-2026-XXXX [relay: use-after-free and double free when a remote relay sends an event with an array as body]
 	- weechat 4.9.5-1 (bug #1142894)
 	NOTE: https://github.com/weechat/weechat/security/advisories/GHSA-hx59-4hq9-6vmw



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea649b8a6c2338d6c9824610f81948bb2503fd7b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ea649b8a6c2338d6c9824610f81948bb2503fd7b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260729/cf7b32a5/attachment.htm>

More information about the debian-security-tracker-commits mailing list