[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Mar 16 20:14:04 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4901827 by security tracker role at 2026-03-16T20:13:57+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,17 +1,17 @@
 CVE-2026-4276 (LibreChat RAG API, version 0.7.0, contains a log-injection vulnerabili ...)
 	TODO: check
 CVE-2026-4270 (Improper Protection of Alternate Path exists in the no-access and work ...)
-	TODO: check
+	NOT-FOR-US: Amazon
 CVE-2026-4269 (A missing S3 ownership verification in the Bedrock AgentCore Starter T ...)
-	TODO: check
+	NOT-FOR-US: Amazon
 CVE-2026-4265 (Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...)
 	TODO: check
 CVE-2026-4254 (A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vu ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-4253 (A security flaw has been discovered in Tenda AC8 16.03.50.11. This aff ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-4252 (A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by t ...)
-	TODO: check
+	NOT-FOR-US: Tenda
 CVE-2026-4251 (A vulnerability was determined in CityData CityChat up to 0.12.6 on An ...)
 	TODO: check
 CVE-2026-4250 (A vulnerability was found in Albert Sa\u011fl\u0131k Hizmetleri ve Tic ...)
@@ -21,19 +21,19 @@ CVE-2026-4243 (A weakness has been identified in La Nacion App 10.2.25 on Androi
 CVE-2026-4242 (A security flaw has been discovered in BabyChakra Pregnancy & Parentin ...)
 	TODO: check
 CVE-2026-4241 (A vulnerability was identified in itsourcecode College Management Syst ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-4240 (A vulnerability was determined in Open5GS up to 2.7.6. The affected el ...)
 	TODO: check
 CVE-2026-4239 (A vulnerability was found in Lagom WHMCS Template up to 2.3.7. Impacte ...)
 	TODO: check
 CVE-2026-4238 (A vulnerability has been found in itsourcecode College Management Syst ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-4237 (A flaw has been found in itsourcecode Free Hotel Reservation System 1. ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-4236 (A security vulnerability has been detected in itsourcecode Online Enro ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-4235 (A weakness has been identified in itsourcecode Online Enrollment Syste ...)
-	TODO: check
+	NOT-FOR-US: itsourcecode System
 CVE-2026-4234 (A security flaw has been discovered in SSCMS 7.4.0. This vulnerability ...)
 	TODO: check
 CVE-2026-4233 (A vulnerability was identified in ThingsGateway 12. This affects an un ...)
@@ -55,7 +55,7 @@ CVE-2026-4224 (When an Expat parser with a registered ElementDeclHandler parses
 CVE-2026-3644 (The fix for CVE-2026-0672, which rejected control characters in http.c ...)
 	TODO: check
 CVE-2026-3476 (A Code Injection vulnerability affecting SOLIDWORKS Desktop from Relea ...)
-	TODO: check
+	NOT-FOR-US: Dassault Systemes
 CVE-2026-3111 (Insecure Direct Object Reference (IDOR) vulnerability in Campus Educat ...)
 	TODO: check
 CVE-2026-3110 (Insecure Direct Object Reference (IDOR) vulnerability in Campus Educat ...)
@@ -71,9 +71,9 @@ CVE-2026-3021 (Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma
 CVE-2026-3020 (Identity based authorization bypass vulnerability (IDOR) that allows a ...)
 	TODO: check
 CVE-2026-32587 (Missing Authorization vulnerability in Saad Iqbal WP EasyPay allows Ex ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-32583 (Missing Authorization vulnerability in Webnus Inc. Modern Events Calen ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-32267 (Craft CMS is a content management system (CMS). From version 4.0.0-RC1 ...)
 	TODO: check
 CVE-2026-32264 (Craft CMS is a content management system (CMS). From version 4.0.0-RC1 ...)
@@ -141,13 +141,13 @@ CVE-2026-25783 (Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x
 CVE-2026-25780 (Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...)
 	TODO: check
 CVE-2026-25369 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-24692 (Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...)
 	TODO: check
 CVE-2026-24458 (Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10. ...)
 	TODO: check
 CVE-2026-23862 (Dell ThinOS 10 versions prior to ThinOS 2602_10.0573, contain an Impro ...)
-	TODO: check
+	NOT-FOR-US: Dell / EMC
 CVE-2026-23489 (Fields is a GLPI plugin that allows users to add custom fields on GLPI ...)
 	TODO: check
 CVE-2026-22545 (Mattermost versions 10.11.x <= 10.11.10 fail to validate user's authen ...)
@@ -197,7 +197,7 @@ CVE-2025-66687 (Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due t
 CVE-2025-65734 (An authenticated arbitrary file upload vulnerability in the Courses/Wo ...)
 	TODO: check
 CVE-2025-62319 (Boolean-Based SQL Injection is a type of blind SQL injection where an  ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-57543 (Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" fie ...)
 	TODO: check
 CVE-2025-54758
@@ -207,27 +207,27 @@ CVE-2025-53815
 CVE-2025-53517
 	REJECTED
 CVE-2025-52649 (HCL AION is affected by a vulnerability where certain identifiers may  ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52648 (HCL AION is affected by a vulnerability where offering images are not  ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52646 (HCL AION is affected by a vulnerability where certain offering configu ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52645 (HCL AION is affected by a vulnerability where model packaging and dist ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52644 (HCL AION is affected by a vulnerability where certain user actions are ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52643 (HCL AION is affected by a vulnerability where untrusted file parsing o ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52642 (HCL AION is affected by a vulnerability where internal filesystem path ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52638 (HCL AION is affected by a vulnerability where container base images ar ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52637 (HCL AION is affected by a vulnerability where certain offering configu ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-52636 (HCL AION is affected by a vulnerability related to the handling of upl ...)
-	TODO: check
+	NOT-FOR-US: HCL
 CVE-2025-2274 (Improper Neutralization of Input During Web Page Generation in Forcepo ...)
-	TODO: check
+	NOT-FOR-US: Forcepoint
 CVE-2025-15587 (Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and ...)
 	TODO: check
 CVE-2025-15554 (Browser caching of LAPS passwords in Truesec\u2019s LAPSWebUI before v ...)
@@ -241,9 +241,9 @@ CVE-2025-15540 ("Functions" module in Raytha CMS allows privileged users towrite
 CVE-2025-11500 (Tinycontrol devices such as tcPDU andLAN Controllers LK3.5, LK3.9 and  ...)
 	TODO: check
 CVE-2025-10685 (Heap-based buffer overflow vulnerability in Softing Industrial Automat ...)
-	TODO: check
+	NOT-FOR-US: Softing
 CVE-2025-10461 (Global file reads caused by improper URL checks in webserver in Softin ...)
-	TODO: check
+	NOT-FOR-US: Softing
 CVE-2026-4255 (A DLL search order hijacking vulnerability in Thermalright TR-VISION H ...)
 	NOT-FOR-US: Thermalright TR-VISION
 CVE-2026-4226 (A weakness has been identified in LB-LINK BL-WR9000 2.4.9. The affecte ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4901827b9fbdd5ab08ccf0df96dae6b0eda366b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e4901827b9fbdd5ab08ccf0df96dae6b0eda366b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260316/81879740/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list