[Git][security-tracker-team/security-tracker][master] Process more NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jun 25 09:17:38 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
440548a6 by Salvatore Bonaccorso at 2026-06-25T10:17:17+02:00
Process more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,41 +27,41 @@ CVE-2026-9775 (ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion
 CVE-2026-9774 (ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion  ...)
 	NOT-FOR-US: ATEN
 CVE-2026-9773 (Unraid Web Server ToggleState Command Injection Remote Code Execution  ...)
-	TODO: check
+	NOT-FOR-US: Unraid Web Server
 CVE-2026-9772 (Unraid Web Server FileUpload Command Injection Remote Code Execution V ...)
-	TODO: check
+	NOT-FOR-US: Unraid Web Server
 CVE-2026-9702 (The InPost PL WordPress plugin before 1.9.1 does not verify that the r ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-9155 (OS Command Injection vulnerability in Rapid7 InsightConnect Sed Plugin ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-9154 (Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-9153 (Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin  ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8666 (OS Command Injection vulnerability in the traceroute action of Rapid7  ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8665 (OS Command Injection vulnerability in the TR action of Rapid7 InsightC ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8664 (OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plu ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8663 (OS Command Injection vulnerability in Rapid7 InsightConnect RPM Plugin ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8662 (Path Traversal vulnerability in the create_archive function of Rapid7  ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8660 (OS Command Injection vulnerability in the ping action of Rapid7 Insigh ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8659 (OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plu ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8658 (OS Command Injection vulnerability in Rapid7 InsightConnect Tcpdump Pl ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8592 (OS Command Injection vulnerability in the process_string action of Rap ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-8330 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
 	NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release)
 CVE-2026-7570 (Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Executio ...)
-	TODO: check
+	NOT-FOR-US: Quest
 CVE-2026-7569 (Quest NetVault Backup viewclient Cross-Site Scripting Authentication B ...)
-	TODO: check
+	NOT-FOR-US: Quest
 CVE-2026-7539 (A potential security vulnerability has been identified in the HP Acces ...)
 	NOT-FOR-US: HP
 CVE-2026-5952 (GitLab has remediated an issue in GitLab CE/EE affecting all versions  ...)
@@ -75,85 +75,85 @@ CVE-2026-5305 (The Email Address Encoder WordPress plugin before 1.0.25, email-e
 CVE-2026-57589 (sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowi ...)
 	TODO: check
 CVE-2026-55762 (Rocket.Chat is an open-source, secure, fully customizable communicatio ...)
-	TODO: check
+	NOT-FOR-US: Rocket.Chat
 CVE-2026-55759 (Rocket.Chat is an open-source, secure, fully customizable communicatio ...)
-	TODO: check
+	NOT-FOR-US: Rocket.Chat
 CVE-2026-55666 (Rocket.Chat is an open-source, secure, fully customizable communicatio ...)
-	TODO: check
+	NOT-FOR-US: Rocket.Chat
 CVE-2026-55583 (Twenty is an open-source CRM (customer relationship management) platfo ...)
-	TODO: check
+	NOT-FOR-US: Twenty CRM
 CVE-2026-55570 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-55455 (Appsmith is a platform to build admin panels, internal tools, and dash ...)
-	TODO: check
+	NOT-FOR-US: Appsmith
 CVE-2026-55454 (Appsmith is a platform to build admin panels, internal tools, and dash ...)
-	TODO: check
+	NOT-FOR-US: Appsmith
 CVE-2026-54759 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-54158 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-54070 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-54069 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-54068 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-54067 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-54066 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-53766 (Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agen ...)
 	TODO: check
 CVE-2026-53765 (Chrome DevTools for agents (chrome-devtools-mcp) lets your coding agen ...)
 	TODO: check
 CVE-2026-52816 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, the J ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52815 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs  ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52814 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, the G ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52813 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, organ ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52812 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git L ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52811 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Rep ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52810 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git s ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52809 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, passw ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52808 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, three ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52807 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, in ne ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52806 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs  ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52805 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, a Ser ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52804 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, a rep ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52802 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, an op ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52801 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, the G ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52800 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, organ ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52799 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, GET / ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52798 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, altho ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52797 (Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52796 (Gogs is an open source self-hosted Git service. Prior to 0.14.3, speci ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52795 (Gogs is an open source self-hosted Git service. In 0.14.3 and earlier, ...)
-	TODO: check
+	NOT-FOR-US: Go Git Service
 CVE-2026-52794 (Sentry is an error tracking and performance monitoring tool. From 24.4 ...)
-	TODO: check
+	NOT-FOR-US: Sentry
 CVE-2026-50551 (SiYuan is an open-source personal knowledge management system. Prior t ...)
-	TODO: check
+	NOT-FOR-US: SiYuan
 CVE-2026-50189 (Appsmith is a platform to build admin panels, internal tools, and dash ...)
-	TODO: check
+	NOT-FOR-US: Appsmith
 CVE-2026-50129 (Mastodon is a free, open-source social network server based on Activit ...)
 	TODO: check
 CVE-2026-50128 (Mastodon is a free, open-source social network server based on Activit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/440548a6336dc2e5c6e5bdf5054a0cb78705f400

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/440548a6336dc2e5c6e5bdf5054a0cb78705f400
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260625/0188a838/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list