[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Nov 2 07:15:32 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d2b72cc by security tracker role at 2026-11-02T07:15:25+00:00
automatic NOT-FOR-US entries update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,155 +1,155 @@
 CVE-2026-95863 (Improper neutralization of input during web page generation in Apache  ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-87718 (Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Secur ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-84231 (Improper neutralization of input during web page generation in Apache  ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-84177 (Incorrect behavior order in Apache Wicket: a file path is validated be ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-84172 (Files accessible to external parties in Apache Wicket.  org.apache.wic ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-84170 (Allocation of resources without limits or throttling in Apache Wicket. ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-83594 (Memory allocation with an excessive size value in Apache Wicket.  org. ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-83559 (Improper encoding or escaping of output in Apache Wicket.  org.apache. ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-83539 (Improper neutralization of input during web page generation in Apache  ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82956 (Improper neutralization of input during web page generation in Apache  ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82898 (Incorrect order of security checks in Apache Wicket.  org.apache.wicke ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82840 (Session fixation in Apache Wicket.  org.apache.wicket.authroles.authen ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82705 (Missing authorization in Apache Wicket.  org.apache.wicket.authorizati ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82704 (Missing authorization in Apache Wicket.  org.apache.wicket.core.reques ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82559 (Insufficient session expiration in Apache Wicket.  org.apache.wicket.p ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82558 (Missing authorization in Apache Wicket.  org.apache.wicket.protocol.ws ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82557 (Missing authorization in Apache Wicket.  org.apache.wicket.markup.html ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-82115 (Missing authorization in Apache Wicket.  org.apache.wicket.protocol.ws ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-68591 (In Modem, there is a possible escalation of privilege due to a permiss ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-68590 (In ip_stack, there is a possible out of bounds read due to improper in ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-68589 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-68588 (In Modem, there is a possible way (for XXX) to XXXXX due to an integer ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-66570 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-62048 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-20600 (In Modem, there is a possible application crash due to a logic error.  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20599 (In Modem, there is a possible escalation of privilege due to a missing ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20598 (In Modem, there is a possible out of bounds read due to an integer ove ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20597 (In Modem, there is a possible out of bounds read due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20596 (In Modem, there is a possible out of bounds read due to improper input ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20595 (In neuropilot, there is a possible out of bounds write due to a missin ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20594 (In Modem, there is a possible out of bounds read due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20593 (In Modem, there is a possible application crash due to improper input  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20592 (In Modem, there is a possible information disclosure due to side chann ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20591 (In GPU pdma, there is a possible escalation of privilege due to a miss ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20590 (In display, there is a possible system crash due to a logic error. Thi ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20585 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20584 (In usb, there is a possible memory corruption due to a missing bounds  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20583 (In usb, there is a possible system crash due to use after free. This c ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20582 (In usb, there is a possible memory corruption due to double free. This ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20581 (In usb, there is a possible memory corruption due to use after free. T ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20580 (In usb, there is a possible system crash due to use after free. This c ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20578 (In Modem, there is a possible information disclosure due to side chann ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20577 (In Modem, there is a possible permission bypass due to a permissions b ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20576 (In afe, there is a possible out of bounds write due to a missing bound ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20575 (In afe, there is a possible memory corruption due to use after free. T ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20574 (In afe, there is a possible memory corruption due to use after free. T ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20573 (In afe, there is a possible memory corruption due to double free. This ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20572 (In adsp, there is a possible out of bounds write due to an integer ove ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20571 (In afe, there is a possible memory corruption due to use after free. T ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20570 (In adsp, there is a possible escalation of privilege due to use after  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20569 (In adsp, there is a possible memory corruption due to use after free.  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20568 (In afe, there is a possible system crash due to use after free. This c ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20567 (In afe, there is a possible out of bounds write due to a missing bound ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20566 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20565 (In Modem, there is a possible out of bounds write due to an incorrect  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20564 (In Modem, there is a possible out of bounds write due to an incorrect  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20563 (In Modem, there is a possible out of bounds write due to an incorrect  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20562 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20561 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20560 (In Modem, there is a possible system crash due to improper input valid ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20559 (In GPU pdma, there is a possible memory corruption due to use after fr ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20558 (In GPU pdma, there is a possible escalation of privilege due to use af ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20557 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20556 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20555 (In Modem, there is a possible out of bounds read due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20554 (In Modem, there is a possible system crash due to a missing bounds che ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20553 (In DA, there is a possible out of bounds write due to a missing bounds ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20552 (In ccci, there is a possible out of bounds write due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20551 (In gnss, there is a possible out of bounds write due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20550 (In gnss, there is a possible out of bounds write due to a missing boun ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20549 (In Modem, there is a possible out of bounds write due to improper inpu ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20548 (In Modem, there is a possible out of bounds write due to an integer ov ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20547 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20546 (In Modem, there is a possible out of bounds write due to an incorrect  ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20545 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-20499 (In Modem, there is a possible out of bounds write due to a missing bou ...)
-	TODO: check
+	NOT-FOR-US: MediaTek
 CVE-2026-120349 (A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. A ...)
 	TODO: check
 CVE-2026-120348 (A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affect ...)
@@ -157,9 +157,9 @@ CVE-2026-120348 (A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4.
 CVE-2026-120347 (A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affect ...)
 	TODO: check
 CVE-2026-120345 (A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e96 ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120344 (A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-1 ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120343 (A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The  ...)
 	TODO: check
 CVE-2026-120342 (A vulnerability was detected in mathurvishal CloudClassroom-PHP-Projec ...)
@@ -207,7 +207,7 @@ CVE-2026-120312 (Network-AI from 5.13.4 before 5.15.5 contains a path traversal
 CVE-2026-120311 (Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnera ...)
 	TODO: check
 CVE-2026-120310 (Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns st ...)
-	TODO: check
+	NOT-FOR-US: Parse Server
 CVE-2026-120309 (Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vuln ...)
 	TODO: check
 CVE-2026-120308 (A Beta9 tenant can attach a volume when deploying a function, endpoint ...)
@@ -217,37 +217,37 @@ CVE-2026-120307 (The Beta9 worker serves the sandbox file API from outside the c
 CVE-2026-120306 (Beta9 turns each shell command in a tenant image definition into a Doc ...)
 	TODO: check
 CVE-2026-120283 (A vulnerability was identified in Linksys E8450 1.2.00.360516. Affecte ...)
-	TODO: check
+	NOT-FOR-US: Linksys
 CVE-2026-120282 (A vulnerability was determined in WAVLINK WN536AX6-A V260507. This imp ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120281 (A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects  ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120280 (A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impa ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120279 (A flaw has been found in WAVLINK WN536AX6-A V260507. The affected elem ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120278 (A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impa ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120277 (A security vulnerability has been detected in WAVLINK WN536AX6-A V2605 ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120276 (A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. Th ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120275 (A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technolog ...)
 	TODO: check
 CVE-2026-120274 (A vulnerability was identified in beecue FastBee up to 2.1.0. Affected ...)
 	TODO: check
 CVE-2026-120263 (When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the defau ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-120242 (A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P ...)
 	TODO: check
 CVE-2026-120241 (A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG- ...)
 	TODO: check
 CVE-2026-120240 (A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. Thi ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120239 (A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vul ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120238 (A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120237 (A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected b ...)
 	TODO: check
 CVE-2026-120236 (A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Aff ...)
@@ -261,15 +261,15 @@ CVE-2026-120233 (A security flaw has been discovered in ag-ui-protocol ag-ui up
 CVE-2026-120232 (A vulnerability was identified in Horizon DataSys Reboot Restore Stand ...)
 	TODO: check
 CVE-2026-120231 (A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120230 (A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the f ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120229 (A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120228 (A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnera ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120227 (A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This af ...)
-	TODO: check
+	NOT-FOR-US: Wavlink
 CVE-2026-120226 (A security vulnerability has been detected in Hangzhou Xiongmai Techno ...)
 	TODO: check
 CVE-2026-120225 (A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1.  ...)
@@ -279,83 +279,83 @@ CVE-2026-120224 (A security flaw has been discovered in Oray Pugongying X5 Pro u
 CVE-2026-120223 (A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1.  ...)
 	TODO: check
 CVE-2026-119627 (The web profile and RSS/Atom feed routes of users and organizations ch ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-119625 (The `/{username}` web route accepted personal access tokens over HTTP  ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-119533 (Repository and organization project boards listed the pull requests th ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-119480 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
-	TODO: check
+	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-119441 (`DELETE /api/v1/orgs/{org}/repos` deletes all repositories of an organ ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-118504 (The web interface blocks issue and pull request changes on archived re ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-118395 (Gitea 1.27.3 stopped personal access tokens restricted to public resou ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-118394 (The OAuth2 userinfo endpoint (`/login/oauth/userinfo`) decided whether ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-118386 (Workflows triggered by a pull request review were read from the commit ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-117685 (The OCI registry's cross-repository blob mount checked the target pack ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-117680 (Improper Check for Unusual or Exceptional Conditions vulnerability in  ...)
 	TODO: check
 CVE-2026-117677 (When parsing an uploaded Helm chart, Gitea decompressed the archive an ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-117649 (The issue timeline API and the web issue page hid cross-reference even ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-117646 (The repositories, stars and watching tabs of user profiles and the rep ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-117635 (The `/api/v1/admin` route group did not enforce the `public-only` rest ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-116474 (The `GITEA_TOKEN` of a Gitea Actions job authenticates as the `gitea-a ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-116296 (The API routes for releases, release assets, milestones and repository ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-116289 (Gitea did not reject personal access tokens restricted to public resou ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-114199 (`GET /api/v1/users/{username}/heatmap` computed the contribution heatm ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-113429 (Legacy (v1 to v3) Actions artifact uploads stored the request's `Conte ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-112887 (Gitea Actions task tokens authenticate to the REST API as a shared sys ...)
-	TODO: check
+	NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
 CVE-2026-111089 (Apache Wicket reads texts from the application's resource bundles \u20 ...)
-	TODO: check
+	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-101186 (DoS vulnerability in the window module. Impact: Successful exploitatio ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101185 (OOB read vulnerability in the peripheral module. Impact: Successful ex ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101183 (UAF vulnerability in the location service module. Impact: Successful e ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101182 (Race condition vulnerability in the location service module. Impact: S ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101181 (Permission control vulnerability in the WLAN module. Impact: Successfu ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101180 (DoS vulnerability in the file parsing module. Impact: Successful explo ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101179 (Buffer overflow vulnerability in the file preview module. Impact: Succ ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101177 (Permission control vulnerability in the Optimizer module. Impact: Succ ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101176 (Permission control vulnerability in the event notification management  ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101175 (Null pointer dereference vulnerability in the ArkWeb module. Impact: S ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101174 (DoS vulnerability in the DSoftBus module. Impact: Successful exploitat ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101173 (DoS vulnerability in the DSoftBus module. Impact: Successful exploitat ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101172 (Permission control vulnerability in the graphics module.Impact: Succes ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101171 (Permission control vulnerability in the background task management mod ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2026-101170 (DoS vulnerability in the file parsing module. Impact: Successful explo ...)
-	TODO: check
+	NOT-FOR-US: Huawei
 CVE-2025-11969 (The System REST APIs do not correctly enforce access control mechanism ...)
-	TODO: check
+	NOT-FOR-US: WSO2
 CVE-2024-5617 (The account lock feature fails to correctly enforce account lockouts o ...)
-	TODO: check
+	NOT-FOR-US: WSO2
 CVE-2026-XXXX [GHSA-c5px-7h4c-gj8p: Remote code execution in C-Kermit]
 	- ckermit <unfixed>
 	NOTE: https://github.com/OpenKermit/ckermit/security/advisories/GHSA-c5px-7h4c-gj8p
@@ -900,9 +900,9 @@ CVE-2026-117666 (Improper Validation of Certificate with Host Mismatch vulnerabi
 CVE-2026-117656 (Acceptance of Extraneous Untrusted Data With Trusted Data vulnerabilit ...)
 	NOT-FOR-US: Erlang Foundation software not packaged in Debian
 CVE-2026-117645 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	TODO: check
+	NOT-FOR-US: Erlang Foundation software not packaged in Debian
 CVE-2026-116755 (Improper Neutralization of Special Elements used in a Command ('Comman ...)
-	TODO: check
+	NOT-FOR-US: SoftIron
 CVE-2026-116563 (The Photo Gallery, Sliders, Proofing and Themes \u2013 NextGEN Gallery ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-116557 (The WP Booking System - Booking Calendar plugin for WordPress is vulne ...)
@@ -3246,7 +3246,7 @@ CVE-2026-115962 (Authentication Bypass by Spoofing vulnerability in myCred myCre
 CVE-2026-115821 (The NewsmanApp plugin for WordPress is vulnerable to Stored Cross-Site ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-115805 (Improper handling of local filesystem paths in Rapid7 Insight Agent on ...)
-	TODO: check
+	NOT-FOR-US: Rapid7
 CVE-2026-115795 (P-Net before 1.0.3 does not check that a complete block header is pres ...)
 	NOT-FOR-US: RT-Labs
 CVE-2026-115794 (P-Net before 1.0.3 passes the application alarm callback a data length ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d2b72cc2104484d2fe577bf6a92375ec0b0aeac

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d2b72cc2104484d2fe577bf6a92375ec0b0aeac
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/f7c54f08/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list