[Git][security-tracker-team/security-tracker][master] NFUs

Mon May 11 11:50:22 BST 2026


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a72a26a1 by Moritz Muehlenhoff at 2026-05-11T12:49:48+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,15 +11,15 @@ CVE-2026-8272 (A security flaw has been discovered in D-Link DNS-320 2.06B01. Th
 CVE-2026-8271 (A vulnerability was identified in D-Link DNS-320 2.06B01. The impacted ...)
 	NOT-FOR-US: D-Link
 CVE-2026-8270 (A vulnerability was determined in Open5GS up to 2.7.7. The affected el ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8269 (A vulnerability was found in Open5GS up to 2.7.7. Impacted is the func ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8268 (A vulnerability has been found in Open5GS up to 2.7.7. This issue affe ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8267 (A flaw has been found in Open5GS up to 2.7.7. This vulnerability affec ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8266 (A vulnerability was detected in Open5GS up to 2.7.7. This affects the  ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8265 (A security vulnerability has been detected in Tenda AC6 15.03.06.23. A ...)
 	NOT-FOR-US: Tenda
 CVE-2026-8264 (A weakness has been identified in Tenda AC6 15.03.06.23. Affected by t ...)
@@ -27,7 +27,7 @@ CVE-2026-8264 (A weakness has been identified in Tenda AC6 15.03.06.23. Affected
 CVE-2026-8263 (A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE ...)
 	NOT-FOR-US: Tenda
 CVE-2026-8262 (A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.  ...)
-	TODO: check
+	NOT-FOR-US: Devs Palace ERP Online
 CVE-2026-8261 (A vulnerability was determined in Squirrel up to 3.2. This affects the ...)
 	TODO: check
 CVE-2026-8260 (A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impact ...)
@@ -39,23 +39,23 @@ CVE-2026-8258 (A flaw has been found in Squirrel up to 3.2. Impacted is the func
 CVE-2026-8257 (A vulnerability was detected in WebAssembly Binaryen up to 117. This i ...)
 	TODO: check
 CVE-2026-8256 (A security vulnerability has been detected in Devs Palace ERP Online u ...)
-	TODO: check
+	NOT-FOR-US: Devs Palace ERP Online
 CVE-2026-8255 (A weakness has been identified in Devs Palace ERP Online up to 4.0.0.  ...)
-	TODO: check
+	NOT-FOR-US: Devs Palace ERP Online
 CVE-2026-8254 (A security flaw has been discovered in Devs Palace ERP Online up to 4. ...)
-	TODO: check
+	NOT-FOR-US: Devs Palace ERP Online
 CVE-2026-8253 (A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.  ...)
-	TODO: check
+	NOT-FOR-US: Devs Palace ERP Online
 CVE-2026-8252 (A vulnerability was determined in Open5GS up to 2.7.7. Affected is the ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8251 (A vulnerability was found in Open5GS up to 2.7.7. This impacts the fun ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8250 (A vulnerability has been found in Open5GS up to 2.7.7. This affects th ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8249 (A flaw has been found in Open5GS up to 2.7.7. The impacted element is  ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8248 (A vulnerability was detected in Open5GS up to 2.7.7. The affected elem ...)
-	TODO: check
+	- open5gs <itp> (bug #1094791)
 CVE-2026-8177 (XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap m ...)
 	TODO: check
 CVE-2026-6433 (The Custom css-js-php WordPress plugin through 2.0.7 does not properly ...)
@@ -69,9 +69,9 @@ CVE-2026-45190 (Net::CIDR::Lite versions before 0.24 for Perl does not properly
 	NOTE: https://github.com/stigtsp/Net-CIDR-Lite/commit/ca9542adec87110556601d7ce48381ea8d13e692 (0.24)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/10/6
 CVE-2026-45180 (Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak ses ...)
-	TODO: check
+	NOT-FOR-US: Catalyst::Plugin::Statsd Perl module
 CVE-2026-45179 (Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user ...)
-	TODO: check
+	NOT-FOR-US: Plack::Middleware::Statsd Perl module
 CVE-2026-1677 (Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TL ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-8244 (A vulnerability was identified in Industrial Application Software IAS  ...)
@@ -149,7 +149,7 @@ CVE-2021-47945 (Argus Surveillance DVR 4.0 contains an unquoted service path vul
 CVE-2021-47944 (memono Notepad 4.2 contains a denial of service vulnerability that all ...)
 	NOT-FOR-US: memono Notepad
 CVE-2021-47943 (TextPattern CMS 4.8.7 contains a remote code execution vulnerability t ...)
-	TODO: check
+	- textpattern <removed>
 CVE-2021-47941 (WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulne ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2021-47940 (WordPress Plugin Download From Files version 1.48 and earlier contains ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a72a26a165e02c6b2bf819802324735d9c527da3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a72a26a165e02c6b2bf819802324735d9c527da3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260511/65d31bb0/attachment.htm>
