[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Nov 3 07:15:34 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
116da27d by security tracker role at 2026-11-03T07:15:27+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,61 +1,61 @@
CVE-2026-97718 (CVE-2026-97718 Is a cross-site request forgery vulnerability in versio ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-94349 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-94290 (SUSE Rancher Fleet clusters reference a kubeconfig secret that the con ...)
- TODO: check
+ NOT-FOR-US: SuSE software not packaged in Debian
CVE-2026-92886 (Missing Authorization vulnerability in T\xdcB\u0130TAK B\u0130LGEM Sof ...)
TODO: check
CVE-2026-91911 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91910 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91909 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91908 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91907 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91906 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incor ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91905 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91904 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incor ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91903 (Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Impro ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91901 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91900 (Dell Alienware Command Center (AWCC), version(s) Versions up to and in ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91899 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91898 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91897 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91896 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91895 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91894 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91893 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-8923 (Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 versio ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2026-88811 (Missing filtering in the SUSERancher Manager meta proxy could cause pa ...)
- TODO: check
+ NOT-FOR-US: SuSE software not packaged in Debian
CVE-2026-88810 (A privilege escalation issue was discovered in Rancher Manager's role- ...)
- TODO: check
+ NOT-FOR-US: SuSE software not packaged in Debian
CVE-2026-88809 (A security vulnerability exists in the SUSE Rancher Manager meta proxy ...)
- TODO: check
+ NOT-FOR-US: SuSE software not packaged in Debian
CVE-2026-86596 (The s2Member plugin for WordPress is vulnerable to Remote Code Executi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86365 (Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-81938 (Grafana Mimir's Alertmanager rejects tenant-supplied receiver configur ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-77881 (Control Web Panel (CWP) before webpanel_version 1.30 contains a blind ...)
TODO: check
CVE-2026-77880 (Control Web Panel (CWP) before webpanel_version 1.16 contains an OS co ...)
@@ -69,11 +69,11 @@ CVE-2026-77877 (Control Web Panel (CWP) before webpanel_version 1.30 contains a
CVE-2026-77876 (Control Web Panel (CWP) before webpanel_version 1.16 contains an OS co ...)
TODO: check
CVE-2026-77800 (ManageEngine Key Manager Plus versions before 7151 are vulnerable to a ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2026-77799 (ManageEngine Key Manager Plus versions before 7150 are vulnerable to a ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2026-76955 (A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110A ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2026-74993 (Improper neutralization of special elements used in an SQL command ('S ...)
TODO: check
CVE-2026-73697 (Control Web Panel (CWP) before webpanel_version 1.16 contains an arbit ...)
@@ -83,291 +83,291 @@ CVE-2026-73696 (Control Web Panel (CWP) before webpanel_version 1.12 contains an
CVE-2026-73695 (Control Web Panel (CWP) before webpanel_version 1.16 contains a path t ...)
TODO: check
CVE-2026-71450 (Authentication bypass using an alternate path or channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Johnson Controls
CVE-2026-67186
REJECTED
CVE-2026-59048 (In rb_cpu_init of trace.c, there is a possible out-of-bounds read due ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59047 (In multiple locations, there is a possible denial of service due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59046 (In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possib ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59045 (In multiple locations, there is a possible memory corruption due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59044 (In multiple locations, there is a possible use-after-free due to a log ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59043 (In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a pos ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59042 (In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59031 (In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a pos ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59028 (In resolveAidConflictLocked of RegisteredAidCache.java, there is a pos ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59022 (In multiple functions of MediaProvider.java, there is a possible permi ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59021 (In multiple locations, there is a possible denial of service due to im ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59020 (In removeUserData of DevicePolicyManagerService.java, there is a possi ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59016 (In sendAnomalyProfile of ProfilingService.java, there is a possible pa ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59015 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59014 (In multiple locations, there is a possible out-of-bounds write due to ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59012 (In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59011 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59010 (In deserialize of legacy.rs, there is a possible denial of service due ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59008 (In setApplicationRestrictions of DevicePolicyManagerService.java, ther ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59007 (In decode_packed_entry_number of codebook.c, there is a possible out-o ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59006 (In getTouchOcclusionMode of WindowState.java, there is a possible tapj ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59005 (In insertInternal of MmsProvider.java, there is a possible multiuser i ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59004 (In multiple locations, there is a possible permission bypass due to an ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59003 (In getSubscriptionProperty of SubscriptionManagerService.java, there i ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59002 (In handleMessage of UsbDeviceManager.java, there is a possible lock-sc ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59001 (In checkQueryPermission of TelephonyProvider.java, there is a possible ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-59000 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58997 (In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58995 (In getEntryFileName of ZipFileRO.cpp, there is a possible memory safet ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58994 (In multiple functions of NfcService.java, there is a possible permissi ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58990 (In l2c_fcr_process_peer_cfg_req of l2c_fcr.cc, there is a possible mem ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58989 (In setOemUnlockAllowedByUser of OemLockService.java, there is a possib ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58988 (In isValid of ShimConverter.cpp, there is a possible out of bounds rea ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58986 (In notifyPictureProfileHandleSelection of MediaQualityService.java, th ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58985 (In handleConnectInternal of RpcServerTrusty.cpp, there is a possible d ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58984 (In multiple locations, there is a possible memory corruption due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58979 (In canPresent of PresentationController.java, there is a possible perm ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58978 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58977 (In is_valid_header of timed_cache_item.c, there is a possible out-of-b ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58976 (In getSelectionBySubIds of ProviderUtil.java, there is a possible cros ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58975 (In multiple locations, there is a possible out-of-bounds write due to ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58974 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58971 (In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58970 (In deliverResult of AppTimeTracker.java, there is a possible backgroun ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58969 (In multiple functions of MediaQualityService.java, there is a possible ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58968 (In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corrup ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58966 (In multiple functions of hppsfilter.c, there is a possible out-of-boun ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58965 (In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possib ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58964 (In checkDestination of SmsUsageMonitor.java, there is a possible permi ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58963 (In multiple locations, there is a possible denial of service due to im ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58962 (In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58961 (In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58957 (In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58956 (In modpowF4 of avb_rsa.c, there is a possible signature verification b ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58955 (In updateNotificationChannel of PreferencesHelper.java, there is a pos ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58953 (In dec_vlc_read of oapv_vlc.c, there is a possible out-of-bounds read ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58951 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58949 (In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possi ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58946 (In navigateUpTo of ActivityClientController.java, there is a possible ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58945 (In multiple locations, there is a possible side channel information le ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58944 (In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58943 (In run of AddAccountSettings.java, there is a possible background acti ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58942 (In do_fault_around of memory.c, there is a possible use after free due ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58938 (In parseChunk of MPEG4Extractor.cpp, there is a possible denial of ser ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58937 (In multiple locations, there is a possible persistent denial of servic ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58936 (In png_set_tRNS of pngset.c, there is a possible memory corruption due ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58934 (In prepareWindowToDisplayDuringRelayout of WindowState.java, there is ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58933 (In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58930 (An unprivileged application can exploit a lack of package/signature va ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58927 (The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arisi ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58926 (A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58925 (The report details a heap Use-After-Free (UAF) vulnerability within th ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58924 (The vulnerability is a heap out-of-bounds read in the EVS HAL's `getSt ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58915 (A physical occupant on an Android Automotive OS (AAOS) Multi-User Mult ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58886 (In updateInputWindows of InputMonitor.java, there is a possible tapjac ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58885 (In multiple locations, there is a possible permission bypass due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58884 (In startTetheredHotspotRequest of WifiServiceImpl.java, there is a pos ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58883 (In multiple locations, there is a possible denial of service due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58882 (In decodeWapPdu of WapPushOverSms.java, there is a possible out of bou ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58879 (In descramble of multiple files, there is a possible out-of-bounds wri ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58877 (In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58876 (In multiple locations, there is a possible memory safety issue due to ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58875 (In multiple locations, there is a possible denial of service due to im ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58873 (In addDragDropListener of WindowManagerService.java, there is a possib ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58871 (In set_type4_frame_classifier of sta_iface.cpp, there is a possible me ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58870 (In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a po ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58868 (In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bo ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58867 (In getMessenger of WifiP2pServiceImpl.java, there is a possible permis ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58866 (In setAccessibilityWindowAttributes of AccessibilityWindowManager.java ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58857 (In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58853 (In multiple functions of ipphelper.c, there is a possible stack bugger ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58847 (In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58845 (In multiple locations, there is a possible out of bounds write due to ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58844 (In multiple locations, there is a possible out of bounds read/write du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58838 (In multiple functions of Helpers.java, there is a possible information ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58837 (In multiple locations, there is a possible background activity launch ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58836 (In handlePackagePostInstall of InstallPackageHelper.java, there is a p ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58829 (In fuse_backing_mmap of backing.c, there is a possible memory corrupti ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58828 (In multiple functions of base.c, there is a possible use-after-free du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58827 (In multiple functions of dma-buf.c, there is a possible use after free ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58826 (In ksys_unshare of fork.c, there is a possible memory corruption due t ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58825 (In multiple functions of fork.c, there is a possible use after free du ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58824 (In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds w ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58821 (In multiple functions of SearchRequestDatabaseUtil.java, there is a po ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58817 (In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a p ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-58814 (In parseContentType of PduParser.java, there is a possible denial of s ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55292 (In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety iss ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55289 (In multiple functions in multiple locations, there is a possible execu ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55288 (In validEfCfis of SIMRecords.java, there is a possible way to cause a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55287 (In onCreate of GrantCredentialsPermissionActivity.java, there is a pos ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55283 (In multiple locations, there is a possible memory safety issue due to ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55275 (In multiple locations, there is a possible use-after-free due to a rac ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55272 (In loadDescription of DeviceAdminAdd.java, there is a possible denial ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55271 (In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, t ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55264 (In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55263 (In multiple functions of AllowBindAppWidgetActivity.java, there is a p ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55262 (In setNotificationListenerAccessGrantedForUserInternal of Notification ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55261 (In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-55257 (In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI con ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49935 (In getXmlFileNameForUser of LocaleManagerService.java, there is a poss ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49934 (In multiple functions of MmiUtils.java, there is a possible risk of US ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49931 (In onActivityResult in multiple locations, there is a possible contact ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49924 (In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49923 (In onResult of AccountManagerService.java, there is a possible untrust ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49922 (In queryRemoteConnectionServices of ConnectionServiceWrapper.java, the ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49912 (In multiple functions of MediaCarouselController.kt, there is a possib ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49906 (An unprivileged application can bypass the `android.car.permission.CAR ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-49903 (The `ClusterRenderingService.dump()` method, accessible to processes h ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-45514 (In multiple functions of SaveUi.java, there is a possible bypass of pa ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-2613 (The Admin REST API accepts user-supplied input without adequately sani ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2026-2102 (wrensec-commons contains a reflected cross-site scripting (XSS) vulner ...)
TODO: check
CVE-2026-29508 (ReadyMedia (formerly MiniDLNA) versions 1.3.0 through 1.3.3 contain a ...)
TODO: check
CVE-2026-28665 (In onCreate of SettingsApplication.java, there is a possible cross-pro ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-28645 (In onStrongAuthRequiredChanged of UsbService.java, there is a possible ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-28643 (In multiple locations, there is a possible denial of service due to a ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-28632 (In multiple locations, there is a possible way to share files across p ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-28621 (In getRingtone of RingtoneFactory.java, there is a possible unprivileg ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-28597 (In writeGrantedUriPermissions of UriGrantsManagerService.java, there i ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-28588 (In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2026-18800 (When an Event Publisher output adapter is configured with properties t ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2026-18199 (Zohocorp ManageEngine Password Manager Pro versions before 13236 and P ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2026-16306 (Remote Code Execution in the `IModular.exe` URI handler in INFINITT He ...)
TODO: check
CVE-2026-16305 (Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` ...)
@@ -399,35 +399,35 @@ CVE-2026-120597 (A vulnerability was identified in Welcart e-Commerce Plugin up
CVE-2026-120596 (A remotely exploitable denial-of-service vulnerability exists in the T ...)
TODO: check
CVE-2026-120578 (The AI Alt Text Generator plugin for WordPress is vulnerable to author ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120577 (The FluentCart A New Era of eCommerce \u2013 Faster, Lighter, and Simp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120575 (The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120574 (The SureCart plugin for WordPress is vulnerable to unauthenticated acc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120563 (The WooCommerce Multilingual & Multicurrency with WPML plugin for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120561 (The JetFormBuilder \u2014 Dynamic Blocks Form Builder plugin for WordP ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120559 (The Contact Form Extender for Divi Builder plugin for WordPress is vul ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120558 (The Advanced Shipment Tracking for WooCommerce plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120552 (The SEO Engine \u2013 Smart SEO with AI, Schema & Redirection for Word ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120551 (The WP Compress \u2013 Instant Performance & Speed Optimization plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120544 (The Academy LMS \u2013 AI Course Builder, Quizzes, Certificates & eLea ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120538 (The Easy Digital Downloads plugin for WordPress is vulnerable to authe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120534 (The Advanced Custom Fields: Extended PRO plugin for WordPress is vulne ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120524 (The News Kit Addons For Elementor plugin for WordPress is vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120518 (The BuddyPress XProfile Image Field plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-120503 (A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0 ...)
TODO: check
CVE-2026-120501 (An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerab ...)
@@ -435,7 +435,7 @@ CVE-2026-120501 (An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure v
CVE-2026-120500 (An Otter Wiki before 2.26.2 contains a stored cross-site scripting vul ...)
TODO: check
CVE-2026-120497 (Stored cross-site scripting (XSS) in the HTML report generator in the ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-120492 (Chainlit 2.12.0 contains a server-side request forgery vulnerability t ...)
TODO: check
CVE-2026-120491 (Wing FTP Server before 8.2.6 contains a stored cross-site scripting vu ...)
@@ -535,7 +535,7 @@ CVE-2026-120214 (@fastify/http-proxy is a Fastify plugin that proxies HTTP reque
CVE-2026-120213 (@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to ...)
TODO: check
CVE-2026-120091 (Temporal Server compiles a Worker Controller Instance module, go.tempo ...)
- TODO: check
+ NOT-FOR-US: Temporal Technologies
CVE-2026-120067 (For updatable cursors, which are enabled by default, psqlODBC adds hid ...)
TODO: check
CVE-2026-120066 (On Unix-like systems, when logging is enabled, psqlODBC creates its lo ...)
@@ -579,13 +579,13 @@ CVE-2026-119732 (Munshi (by Petpooja) before 2026-07-28 contained a broken objec
CVE-2026-119731 (Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vuln ...)
TODO: check
CVE-2026-119301 (Improper neutralization of quoting syntax in SQL identifier constructi ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-119085 (Improper neutralization of special elements used in a template engine ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-118871 (SQL injection vulnerability classified as an internal threat level.Att ...)
- TODO: check
+ NOT-FOR-US: ZTE
CVE-2026-118052 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Man ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-117549 (@fastify/secure-session is a session plugin for Fastify that stores an ...)
TODO: check
CVE-2026-117531 (@fastify/multipart is the multipart form-data and file upload plugin f ...)
@@ -605,35 +605,35 @@ CVE-2026-117067 (An out-of-bounds memory access vulnerability in the N2 SCTP int
CVE-2026-116958 (A flaw was found in konflux-ci. This vulnerability allows arbitrary co ...)
TODO: check
CVE-2026-116769 (CVE-2026-116769 is an authentication bypass vulnerability in Secure Ac ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-116768 (CVE-2026-116768 is a missing length validation vulnerability in Secure ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-116767 (CVE-2026-116767 is an improper input handling vulnerability in Secure ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-116766 (CVE-2026-116766 is an improper input handling vulnerability in the Sec ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-116635 (Improper limitation of a pathname to a restricted directory in the dep ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-116606 (An authentication bypass in Barracuda Email Security Gateway versions ...)
TODO: check
CVE-2026-115654 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Man ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-115653 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV han ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-115403 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-115215 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the Ne ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-115205 (The AZEXO Store Locator WordPress plugin through 1.4 does not have a c ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114408 (In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-114364 (Improper neutralization of special elements used in an SQL command ('S ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-113687 (Improper isolation or compartmentalization vulnerability in Apache Syn ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-113511 (Authorization bypass through User-Controlled key vulnerability in Apac ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-111959 (Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), ...)
TODO: check
CVE-2026-111565
@@ -641,11 +641,11 @@ CVE-2026-111565
CVE-2026-111560 (Improper neutralization of shell metacharacters in the timezone config ...)
TODO: check
CVE-2026-111464 (The WP Fastest Cache plugin for WordPress is vulnerable to Sensitive I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111048 (FOSSBilling is an open source billing and client-management platform. ...)
TODO: check
CVE-2026-110535 (Improper Privilege Management vulnerability in Apache Syncope. Auth ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-109142 (When a CA's parent lives on the same Krill server: instead of building ...)
TODO: check
CVE-2026-109141 (The vulnerability gives a role that is restricted to a list of CAs (ca ...)
@@ -653,11 +653,11 @@ CVE-2026-109141 (The vulnerability gives a role that is restricted to a list of
CVE-2026-109140 (The vulnerability is that Krill encrypts every login-session token wit ...)
TODO: check
CVE-2026-109083 (Improper isolation or compartmentalization vulnerability in Apache Syn ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107457 (A memory corruption vulnerability in the QMqttClient class of the Qt M ...)
TODO: check
CVE-2026-107441 (An out-of-bounds write vulnerability in the CGI program of Zyxel GS190 ...)
- TODO: check
+ NOT-FOR-US: Zyxel
CVE-2026-106808 (OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow ...)
TODO: check
CVE-2026-106807 (A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP ...)
@@ -665,93 +665,93 @@ CVE-2026-106807 (A denial-of-service vulnerability exists in open5GS v2.8.0 in t
CVE-2026-106806 (A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI s ...)
TODO: check
CVE-2026-106805 (A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Sessi ...)
- TODO: check
+ NOT-FOR-US: Free5GC
CVE-2026-106804 (A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in ...)
TODO: check
CVE-2026-106803 (A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in ...)
TODO: check
CVE-2026-106004 (The DT LMS WordPress plugin through 1.2 does not perform capability o ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105993 (The DT Directory Lite Addon WordPress plugin through 1.1 does not perf ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105967 (The Gallery for Social Photo WordPress plugin through 1.0.0.41 does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105770 (Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy ...)
TODO: check
CVE-2026-105769 (kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access ...)
TODO: check
CVE-2026-105606 (Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upl ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105605 (Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cro ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105604 (Joomla Extension - dj-extensions.com - Unauthenticated SQL injection i ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105603 (Joomla Extension - dj-extensions.com - Authenticated arbitrary file up ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105602 (Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105601 (Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5 ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105600 (Joomla Extension - php-web-design.com - RCE via setting strings in Sta ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-105476 (Improper link resolution before file access in cPanel allows remote au ...)
TODO: check
CVE-2026-105475 (Improper neutralization of a NUL byte in cPanel allows remote attacker ...)
TODO: check
CVE-2026-104648 (The weMail WordPress plugin through 2.1.6 does not restrict a site-wi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104647 (The weMail WordPress plugin through 2.1.6 does not correctly verify u ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104080 (Control Web Panel (CWP) before webpanel_version 1.30 contains an OS co ...)
TODO: check
CVE-2026-103420 (Joomla Extension - php-web-design.com - CSRF for various actions in St ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-103419 (Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-103379 (The WATI Chat and Notification WordPress plugin through 1.1.8 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103310 (The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102802 (Joomla Extension - regularlabs.com - PHP code injection vector in Sour ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102801 (Joomla Extension - regularlabs.com - Exposure of Sensitive Information ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102435 (The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101184 (Permission control vulnerability in the Bluetooth module. Impact: Succ ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-101178 (Permission control vulnerability in the autofill service module. Impac ...)
- TODO: check
+ NOT-FOR-US: Huawei
CVE-2026-100140 (An integer overflow vulnerability in the Qt XML parsing (Qt5Compat / Q ...)
TODO: check
CVE-2026-0053 (In multiple locations, there is a possible method for a primary user t ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2025-71450 (inih before r63 contains a one-byte stack buffer under-read in ini_par ...)
TODO: check
CVE-2025-62819 (Keyfactor EJBCA through 9.3.3 performs insufficient authorization chec ...)
TODO: check
CVE-2025-5769 (The authentication endpoint does not properly encode user-supplied inp ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2025-26433 (In multiple locations, there is a possible way to trick a user into ac ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2025-22436 (In multiple locations, there is a possible way to trick a user into di ...)
- TODO: check
+ NOT-FOR-US: Android
CVE-2025-1397 (When utilizing JWT Bearer or SAML2 Bearer grant types, the system fail ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2025-13647 (The affected component fails to enforce expected validation constraint ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2025-12544 (The Publisher portal fails to enforce proper validation on uploaded SV ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2024-9517 (The refresh token grant type in WSO2 products fails to re-validate acc ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2024-7075 (The user search function within the management console fails to proper ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2024-2372 (The affected components accept user-supplied input for constructing re ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2024-12141 (The product fails to sufficiently validate callback URLs, allowing the ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2024-12139 (The error handling implementation fails to properly sanitize or valida ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2026-XXXX [ssh: Read/write authorized keys file using user account privileges]
- freedombox 26.15
NOTE: https://alioth-lists.debian.net/pipermail/freedombox-discuss/2026-November/010041.html
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/116da27dca083b762b7dc6f32bb1ccba2fd4c000
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/116da27dca083b762b7dc6f32bb1ccba2fd4c000
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/3b952544/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list