[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-26477/dokuwiki

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun May 10 18:51:53 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e56622f6 by Salvatore Bonaccorso at 2026-05-10T19:51:23+02:00
Update status for CVE-2026-26477/dokuwiki

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21304,9 +21304,10 @@ CVE-2026-27655 (Zohocorp ManageEngine Exchange Reporter Plus versions before 580
 CVE-2026-27124 (FastMCP is the standard framework for building MCP applications. Prior ...)
 	NOT-FOR-US: FastMCP
 CVE-2026-26477 (An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote  ...)
-	- dokuwiki <undetermined>
+	- dokuwiki 2025-05-14.b+dfsg-6
 	NOTE: https://github.com/Hebing123/cve/issues/94
-	TODO: check upstream details and replace note with upstream reference
+	NOTE: https://github.com/dokuwiki/dokuwiki/issues/4613
+	NOTE: Fixed by: https://github.com/dokuwiki/dokuwiki/commit/bfc167db63967f8c872b3d797ca81138b9011ef4
 CVE-2026-25773 (** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to saniti ...)
 	NOT-FOR-US: Focalboard
 CVE-2026-25118 (immich is a high performance self-hosted photo and video management so ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e56622f65a48f56c467cb68f02cf046f3e157ed4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e56622f65a48f56c467cb68f02cf046f3e157ed4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260510/a4414e54/attachment.htm>


More information about the debian-security-tracker-commits mailing list