[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Nov 4 19:38:27 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ec2793a0 by security tracker role at 2026-11-04T19:38:19+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,20 +1,334 @@
-CVE-2026-121009
+CVE-2026-97705 (Moleculer is a progressive microservices framework for Node.js. Prior ...)
+ TODO: check
+CVE-2026-97701 (Zulip is an open-source team collaboration tool. In Zulip Server versi ...)
+ TODO: check
+CVE-2026-97397 (The Remove Google Fonts \u2013 Disable, Block, or Replace with Bunny F ...)
+ TODO: check
+CVE-2026-95649 (IRISPowerscan insufficiently restrict the use of untrusted scripts. An ...)
+ TODO: check
+CVE-2026-94460 (IRISPowerscan contain an insecure default configuration where the buil ...)
+ TODO: check
+CVE-2026-94459 (IRISPowerscan contain default user accounts with predictable credentia ...)
+ TODO: check
+CVE-2026-93900 (The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress is v ...)
+ TODO: check
+CVE-2026-92704 (SharpEmu is an experimental PlayStation 5 emulator for Windows and Lin ...)
+ TODO: check
+CVE-2026-91168 (Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linu ...)
+ TODO: check
+CVE-2026-91163 (Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linu ...)
+ TODO: check
+CVE-2026-90634 (An uncontrolled memory access in the PDF import code of Apache OpenOff ...)
+ TODO: check
+CVE-2026-90632 (Apache OpenOffice documents can include multimedia content (audio, vid ...)
+ TODO: check
+CVE-2026-90631 (Apache OpenOffice documents can contain links. A missing Authorization ...)
+ TODO: check
+CVE-2026-90629 (An uncontrolled memory access in the WMF import code of Apache OpenOff ...)
+ TODO: check
+CVE-2026-90628 (An uncontrolled memory access in the PDF export code of Apache OpenOff ...)
+ TODO: check
+CVE-2026-90627 (The flat file database driver in Apache Openoffice versions through 4. ...)
+ TODO: check
+CVE-2026-90626 (An uncontrolled memory access in the PDF import code of Apache OpenOff ...)
+ TODO: check
+CVE-2026-90624 (An unchecked memory access in the PDF import code of Apache OpenOffice ...)
+ TODO: check
+CVE-2026-82033 (DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e240 ...)
+ TODO: check
+CVE-2026-82029 (Invoice Ninja before 5.13.28 contains a broken access control vulnerab ...)
+ TODO: check
+CVE-2026-76506 (A vulnerability in the web-based management interface of Cisco UCS Cen ...)
+ TODO: check
+CVE-2026-76419 (A vulnerability in the web-based management interface of Cisco Unified ...)
+ TODO: check
+CVE-2026-66736
+ REJECTED
+CVE-2026-65555 (Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny To ...)
+ TODO: check
+CVE-2026-63183 (OmniAuth is a flexible authentication system utilizing Rack middleware ...)
+ TODO: check
+CVE-2026-62126 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
+ TODO: check
+CVE-2026-62007 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-59268 (An out-of-bounds Write vulnerability in Apache OpenOffice versions thr ...)
+ TODO: check
+CVE-2026-59267 (A crafted DXF document causes a heap buffer overflow in Draw in Apache ...)
+ TODO: check
+CVE-2026-59264 (The Windows installers of Apache OpenOffice 4.1.16 and earlier allow a ...)
+ TODO: check
+CVE-2026-59263 (A manipulated document opened in Apache OpenOffice 4.1.16 or earlier m ...)
+ TODO: check
+CVE-2026-57853 (DataGerry before 3.3.0 contains a server-side template injection vulne ...)
+ TODO: check
+CVE-2026-57775 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
+ TODO: check
+CVE-2026-57666 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-57639 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-56065 (Insertion of Sensitive Information into Externally-Accessible File or ...)
+ TODO: check
+CVE-2026-54861 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-39431 (On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API func ...)
+ TODO: check
+CVE-2026-39430 (On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator a ...)
+ TODO: check
+CVE-2026-20241 (A vulnerability in the authorization mechanism of Cisco Identity Servi ...)
+ TODO: check
+CVE-2026-19731 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
+ TODO: check
+CVE-2026-19721 (Improper restriction of XML external entity reference vulnerability in ...)
+ TODO: check
+CVE-2026-122148 (In Yealink MeetingBoard Pro before 331.320.0.64, the Web management mo ...)
+ TODO: check
+CVE-2026-122124 (On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with shor ...)
+ TODO: check
+CVE-2026-122120 (In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthoriz ...)
+ TODO: check
+CVE-2026-122118 (In certain Yealink products before 2026-04-15, when the Wi-Fi AP funct ...)
+ TODO: check
+CVE-2026-122116 (Certain Yealink terminal devices before 2026-04-21 contain an improper ...)
+ TODO: check
+CVE-2026-122054 (Converting crafted BIG-HKSCS input to UCS-4 or the internal wide chara ...)
+ TODO: check
+CVE-2026-122032 (SPIP before 4.4.29 contains a SQL injection vulnerability that allows ...)
+ TODO: check
+CVE-2026-122008 (Oqtane Framework before 10.3.0 contains a server-side request forgery ...)
+ TODO: check
+CVE-2026-122007 (Oqtane Framework before 10.3.0 contains a broken access control vulner ...)
+ TODO: check
+CVE-2026-122006 (The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagi ...)
+ TODO: check
+CVE-2026-121993 (wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing ...)
+ TODO: check
+CVE-2026-121971 (The component ScopingHttpClientin Symfony HttpClientmerges the options ...)
+ TODO: check
+CVE-2026-121970 (Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before 6.4.1 ...)
+ TODO: check
+CVE-2026-121967 (Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35 ...)
+ TODO: check
+CVE-2026-121966 (Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth sub ...)
+ TODO: check
+CVE-2026-121965 (Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a ...)
+ TODO: check
+CVE-2026-121964 (FreeRDP before 3.32.2 contains a heap-based buffer overflow in the RD ...)
+ TODO: check
+CVE-2026-121963 (FreeRDP before 3.32.2 contains a use-after-free vulnerability in the a ...)
+ TODO: check
+CVE-2026-121962 (FreeRDP before 3.32.2 contains a heap buffer overflow in transport_def ...)
+ TODO: check
+CVE-2026-121961 (FreeRDP before 3.32.2 contains a use-after-free vulnerability in the f ...)
+ TODO: check
+CVE-2026-121960 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
+ TODO: check
+CVE-2026-121959 (FreeRDP before 3.32.2 contains an infinite loop vulnerability in webso ...)
+ TODO: check
+CVE-2026-121958 (FreeRDP through 3.32.1 has a heap out-of-bounds write in the RDPGFX cl ...)
+ TODO: check
+CVE-2026-121957 (FreeRDP before 3.32.2 contains a use-after-free vulnerability that all ...)
+ TODO: check
+CVE-2026-121956 (FreeRDP before 3.32.2 contains a double free in the WinPR Kerberos SSP ...)
+ TODO: check
+CVE-2026-121955 (FreeRDP before 3.32.2 contains a use-after-free vulnerability in Emula ...)
+ TODO: check
+CVE-2026-121954 (FreeRDP before 3.32.2 has a heap out-of-bounds write in the planar cod ...)
+ TODO: check
+CVE-2026-121953 (FreeRDP before 3.32.2 has a use-after-free in the client's rdpgfx dyna ...)
+ TODO: check
+CVE-2026-121952 (FreeRDP before 3.32.2 has an out-of-bounds write in the proxy because ...)
+ TODO: check
+CVE-2026-121951 (FreeRDP 3.0.0 before 3.32.2 server-side RDP peer input parsing skips t ...)
+ TODO: check
+CVE-2026-121950 (FreeRDP before 3.32.2 does not check the product of surface dimensions ...)
+ TODO: check
+CVE-2026-121946 (zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a ...)
+ TODO: check
+CVE-2026-121945 (CoopCycle coopcycle-web before 6.20.1 contains a broken access control ...)
+ TODO: check
+CVE-2026-121944 (sngrep through 1.9.0 contains an infinite loop vulnerability in captur ...)
+ TODO: check
+CVE-2026-121943 (Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vuln ...)
+ TODO: check
+CVE-2026-121942 (ZBar through 0.23.95 contains an out-of-bounds read vulnerability in _ ...)
+ TODO: check
+CVE-2026-121941 (libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability ...)
+ TODO: check
+CVE-2026-121940 (Stonewuu ai-fusion-video before 1.3.0 contains an insecure direct obje ...)
+ TODO: check
+CVE-2026-121939 (Databasement before 1.10.9 contains an authentication bypass vulnerabi ...)
+ TODO: check
+CVE-2026-121938 (langchain4j-aideepin before 3.31.0 contains an insecure direct object ...)
+ TODO: check
+CVE-2026-121937 (loonflow before r3.2.3 contains a missing authorization vulnerability ...)
+ TODO: check
+CVE-2026-121936 (easyVoice before 0.0.23 contains a server-side request forgery vulnera ...)
+ TODO: check
+CVE-2026-121933 (A flaw has been found in Linksys E5350 1.0.00.037. This impacts the fu ...)
+ TODO: check
+CVE-2026-121932 (A vulnerability was detected in Linksys E5350 1.0.00.037. This affects ...)
+ TODO: check
+CVE-2026-121931 (A security vulnerability has been detected in Linksys WRT54GL 4.30.18. ...)
+ TODO: check
+CVE-2026-121930 (A weakness has been identified in Linksys WRT54GL 4.30.18. The affecte ...)
+ TODO: check
+CVE-2026-121929 (A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. ...)
+ TODO: check
+CVE-2026-121928 (A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. Thi ...)
+ TODO: check
+CVE-2026-121927 (A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Aff ...)
+ TODO: check
+CVE-2026-121926 (A vulnerability was detected in yezhihao jt808-server up to a07f68c466 ...)
+ TODO: check
+CVE-2026-121925 (A stack-based buffer overflow in libsnowflakeclient and the Snowflake ...)
+ TODO: check
+CVE-2026-121640 (An Authentication Bypass by Capture-replay vulnerability in WatchGuard ...)
+ TODO: check
+CVE-2026-121639 (A Missing Authentication for Critical Function vulnerability in WatchG ...)
+ TODO: check
+CVE-2026-121638 (An Improper Certificate Validation vulnerability in WatchGuard AuthPoi ...)
+ TODO: check
+CVE-2026-121637 (An improper integrity validation vulnerability in WatchGuard AuthPoint ...)
+ TODO: check
+CVE-2026-121620 (CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authent ...)
+ TODO: check
+CVE-2026-121373 (The Symfony HtmlSanitizer componentMetaRefreshAttributeSanitizer, intr ...)
+ TODO: check
+CVE-2026-121147 (This vulnerability exists in the iRA 2.0 and iRA.ev mobile application ...)
+ TODO: check
+CVE-2026-121146 (This vulnerability exists in the iRA 2.0 and iRA.ev mobile application ...)
+ TODO: check
+CVE-2026-121145 (This vulnerability exists in the iRA 2.0 and iRA.ev mobile application ...)
+ TODO: check
+CVE-2026-121144 (This vulnerability exists in the iRA 2.0 and iRA.ev mobile application ...)
+ TODO: check
+CVE-2026-120554 (The Import and export users and customers plugin for WordPress is vuln ...)
+ TODO: check
+CVE-2026-120422 (Sogou Input Method for Windows contains a vulnerability in the configu ...)
+ TODO: check
+CVE-2026-120421 (In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19 ...)
+ TODO: check
+CVE-2026-119776 (In all prior released versions of FRRouting, the OSPFv3 (for IPv6) imp ...)
+ TODO: check
+CVE-2026-119749 (The GetPaid plugin for WordPress before 2.8.63 contains an improper in ...)
+ TODO: check
+CVE-2026-119748 (The GetPaid plugin for WordPress before 2.8.63 contains an authorizati ...)
+ TODO: check
+CVE-2026-119747 (The GetPaid plugin for WordPress before 2.8.63 contains an incorrect a ...)
+ TODO: check
+CVE-2026-119746 (ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E) contain a ...)
+ TODO: check
+CVE-2026-119745 (Sender plugin for WordPress before 2.11.3 contains a missing authoriza ...)
+ TODO: check
+CVE-2026-119481 (Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuil ...)
+ TODO: check
+CVE-2026-119477 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-119468 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-119366 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
+ TODO: check
+CVE-2026-118516 (The Symfony Routing componentsCompiledUrlMatcher and UrlMatcherinterpr ...)
+ TODO: check
+CVE-2026-118513 (Authentication bypass by spoofing inX509AuthenticatorandX509Authentica ...)
+ TODO: check
+CVE-2026-118391 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
+ TODO: check
+CVE-2026-115574 (Zulip is an open-source team collaboration tool. From 11.0 until 12.2, ...)
+ TODO: check
+CVE-2026-115498 (The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Si ...)
+ TODO: check
+CVE-2026-115474 (Zulip is an open-source team collaboration tool. From 8.0 until 12.2, ...)
+ TODO: check
+CVE-2026-115448 (Uncontrolled recursion in Apache ZooKeeper. The server serializes its ...)
+ TODO: check
+CVE-2026-114456 (Multiple Snowflake client drivers implementing the `authenticator=exte ...)
+ TODO: check
+CVE-2026-114426 (SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 fi ...)
+ TODO: check
+CVE-2026-114425 (SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplie ...)
+ TODO: check
+CVE-2026-114424 (SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-infl ...)
+ TODO: check
+CVE-2026-114421 (SEPPmail Secure Email Gateway before 15.1.1 permits password recovery ...)
+ TODO: check
+CVE-2026-114420 (SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP m ...)
+ TODO: check
+CVE-2026-113783 (ESP-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
+ TODO: check
+CVE-2026-113782 (ESP-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
+ TODO: check
+CVE-2026-113780 (ESF-IDF is the Espressif Internet of Things (IOT) Development Framewor ...)
+ TODO: check
+CVE-2026-111822 (Improper invalidation of cached authorizations vulnerability in Apache ...)
+ TODO: check
+CVE-2026-111821 (Improper input validation vulnerability in Apache ActiveMQ, Apache Act ...)
+ TODO: check
+CVE-2026-111040 (The platform allows persistent HTML injection into editable fields man ...)
+ TODO: check
+CVE-2026-111038 (CSV formula injection vulnerability in the export functionality of the ...)
+ TODO: check
+CVE-2026-111037 (A reflected Cross-Site Scripting (XSS) vulnerability in the Tenders mo ...)
+ TODO: check
+CVE-2026-111036 (Server-side request forgery (SSRF) vulnerability in the Coupa Supplier ...)
+ TODO: check
+CVE-2026-110944 (Resource exhaustion vulnerability in the HTTP request handling of the ...)
+ TODO: check
+CVE-2026-110935 (The PFI plugin framework deployment routine does not validate path com ...)
+ TODO: check
+CVE-2026-110022 (The PFI plugin framework deploys executable assemblies (DLLs) from a s ...)
+ TODO: check
+CVE-2026-110021 (PLCnext Engineer checks GSDX manifest reference digests but does not c ...)
+ TODO: check
+CVE-2026-108949 (Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ B ...)
+ TODO: check
+CVE-2026-108946 (Improper input validation vulnerability in Apache ActiveMQ, Apache Act ...)
+ TODO: check
+CVE-2026-108500 (Input validation vulnerability in Apache ActiveMQ configured to use th ...)
+ TODO: check
+CVE-2026-107846 (bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers ...)
+ TODO: check
+CVE-2026-107479 (An integer truncation vulnerability in the QTextCodec conversion funct ...)
+ TODO: check
+CVE-2026-106554 (One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an ...)
+ TODO: check
+CVE-2026-104799 (The Mobile builder plugin for WordPress is vulnerable to Privilege Esc ...)
+ TODO: check
+CVE-2026-103582 (Unbounded memory allocation and missing frame size validation in Apach ...)
+ TODO: check
+CVE-2026-102345 (Zammad is a web based open source helpdesk/customer support system. Pr ...)
+ TODO: check
+CVE-2026-100408 (Git for Windows is the Windows port of Git. From 2.43.0.windows.1 unti ...)
+ TODO: check
+CVE-2026-100407 (Git for Windows is the Windows port of Git. From 2.44.0.windows.1 unti ...)
+ TODO: check
+CVE-2026-100302 (Allocation of Resources Without Limits or Throttling in the multiRead ...)
+ TODO: check
+CVE-2026-100300 (Improper handling of exceptional conditions in the quota subsystem of ...)
+ TODO: check
+CVE-2026-100252 (Improper Authorization vulnerability in Apache ZooKeeper. When SASL a ...)
+ TODO: check
+CVE-2026-100235 (Incorrect authorization due to a time-of-check to time-of-use (TOCTOU) ...)
+ TODO: check
+CVE-2026-121009 (SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl skip t ...)
- libsql-abstract-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44887029/
NOTE: Fixed by: https://github.com/dbsrgits/sql-abstract/commit/b6e7d991ac588b937e8943a5b28b6837ff276a51 (v2.000001_04)
-CVE-2026-121008
+CVE-2026-121008 (SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-s ...)
- libsql-abstract-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44887025/
NOTE: Fixed by: https://github.com/dbsrgits/sql-abstract/commit/85a75fcde3e09da5181dee07a4eccba76ad94305 (v2.000001_04)
-CVE-2026-121007
+CVE-2026-121007 (SQL::Abstract versions from 1.90_01 before 2.000001_04 for Perl allow ...)
- libsql-abstract-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44887027/
NOTE: Fixed by: https://github.com/dbsrgits/sql-abstract/commit/79fc34e874b4edb441154eccddb04c57d5c1c90e (v2.000001_04)
-CVE-2026-114627
+CVE-2026-114627 (Web::Simple versions before 0.036 for Perl do not escape values interp ...)
- libweb-simple-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44886751/
NOTE: Fixed by: https://github.com/p5sagit/Web-Simple/commit/01e575827fdd9ba3a08063fd414b1de465380015 (v0.036)
-CVE-2026-121632
+CVE-2026-121632 (Data::MuForm versions through 0.05 for Perl render attribute values an ...)
NOT-FOR-US: Data::MuForm Perl module
CVE-2026-XXXX [GHSA-f3w6-w445-fwh9]
- rails <unfixed>
@@ -82,7 +396,8 @@ CVE-2026-XXXX [GHSA-gmj8-hvj3-49mw]
CVE-2026-115696
- iwd <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2560194
-CVE-2026-109518
+CVE-2026-109518 (On Debian, Ubuntu, and derivative Linux distributions, an on-path atta ...)
+ {DSA-6607-1 DLA-4880-1}
- apt 3.3.6
NOTE: https://lists.debian.org/deity/2026/11/msg00005.html
CVE-2026-120420
@@ -879,7 +1194,7 @@ CVE-2026-119922 (Improper access control in the Babelfish for PostgreSQL extensi
NOT-FOR-US: Amazon
CVE-2026-119742 (Nagios XI before 2026R2 contains an OS command injection vulnerability ...)
TODO: check
-CVE-2026-119741 (rsync through 3.5.1 contains a denial of service vulnerability in the ...)
+CVE-2026-119741 (rsync before 3.5.2 contains a denial of service vulnerability in the d ...)
- rsync 3.5.2+ds1-1 (bug #1149604)
NOTE: https://github.com/RsyncProject/rsync/issues/1115
NOTE: https://github.com/RsyncProject/rsync/pull/1132
@@ -1787,36 +2102,43 @@ CVE-2026-99269 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/2935062be77113c1c4565ca9d0c72180449aafee (7.3)
-CVE-2026-99268 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99268
+ REJECTED
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/b88902d8745a701d24275d012f0830e3628e2a22 (7.4-rc1)
-CVE-2026-99267 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99267
+ REJECTED
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/9c151648780d89e5446e5f89f3fa2e416c3bb911 (7.4-rc1)
-CVE-2026-99266 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99266
+ REJECTED
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/ab4536bf2e5617b04f2d9396f06393c7bbfb071d (7.4-rc1)
-CVE-2026-99265 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99265
+ REJECTED
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/a3d7ee11289f657aa9af826d8f0844221292a27a (7.4-rc1)
-CVE-2026-99264 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99264
+ REJECTED
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/8444de681a179e41a4eb92d5bbe770a0677074a6 (7.4-rc1)
-CVE-2026-99263 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99263
+ REJECTED
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
NOTE: https://git.kernel.org/linus/937d38dcacd675dc0572d6c9b6743960df3128ed (7.4-rc1)
-CVE-2026-99262 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99262
+ REJECTED
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
NOTE: https://git.kernel.org/linus/89f193dc3ef462059387e9691bf6af4b1808379a (7.4-rc1)
@@ -1862,7 +2184,8 @@ CVE-2026-99253 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/76a82c666abf155ad52d5f41043eac77dd3e41d8 (7.4-rc1)
-CVE-2026-99252 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99252
+ REJECTED
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
@@ -1901,7 +2224,8 @@ CVE-2026-99244 (In the Linux kernel, the following vulnerability has been resolv
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
NOTE: https://git.kernel.org/linus/5c0985dd3c32fc2bbd0e8beaf13cf52cd97376a2 (7.4-rc1)
-CVE-2026-99243 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-99243
+ REJECTED
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
NOTE: https://git.kernel.org/linus/0e5663856b69219ef2f02e04bac9f5c5be19718a (7.4-rc1)
@@ -3670,6 +3994,7 @@ CVE-2026-11396 (The Product Filter for WooCommerce by WBW plugin for WordPress i
CVE-2026-119980 (The UsersWP \u2013 Front-end login form, User Registration, User Profi ...)
NOT-FOR-US: WordPress plugin
CVE-2026-119977 (WordPress Core is vulnerable to Remote Code Execution in versions 4.7 ...)
+ {DSA-6596-1}
- wordpress 7.1.4+dfsg1-1
NOTE: https://wordpress.org/news/2026/10/wordpress-7-1-4/
CVE-2026-119730 (Maxthon Browser for Android before 7.5.8.103 contains an address bar s ...)
@@ -29974,9 +30299,9 @@ CVE-2026-107171 (An Hardcoded Cryptographic Key vulnerability existed in Trellix
NOT-FOR-US: Trellix
CVE-2026-106599 (Deserialization of Untrusted Data vulnerability in Brainstorm Force Su ...)
NOT-FOR-US: WordPress plugin or theme
-CVE-2026-106465 (The NetX Secure DTLS server sends a HelloVerifyRequest carrying a fres ...)
+CVE-2026-106465 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603, the Net ...)
NOT-FOR-US: Eclipse
-CVE-2026-106464 (`_nx_secure_x509_parse_signature_data` computes the certificate signat ...)
+CVE-2026-106464 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
CVE-2026-105874 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
NOT-FOR-US: WordPress plugin or theme
@@ -36023,10 +36348,12 @@ CVE-2026-109781 (Denial-of-service in the Printing: Output component. This vulne
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/#CVE-2026-109781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109781
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109781
-CVE-2026-102704
+CVE-2026-102704 ([This CNA information record relates to multiple CVEs; the text explai ...)
+ {DSA-6610-1}
- xen 4.20.4+63-g7abfd2bce2-1
NOTE: https://xenbits.xen.org/xsa/advisory-523.html
-CVE-2026-102703
+CVE-2026-102703 ([This CNA information record relates to multiple CVEs; the text explai ...)
+ {DSA-6610-1}
- xen 4.20.4+63-g7abfd2bce2-1
NOTE: https://xenbits.xen.org/xsa/advisory-523.html
CVE-2026-102699 ([This CNA information record relates to multiple CVEs; the text explai ...)
@@ -37723,19 +38050,19 @@ CVE-2026-XXXX [GHSA-8m87-jj8p-2fqc]
- freerdp3 3.33.0+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8m87-jj8p-2fqc
-CVE-2026-121386 [GHSA-799q-hjgw-g55g]
+CVE-2026-121386 (FreeRDP before 3.32.2 contains a denial of service vulnerability in Wi ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-799q-hjgw-g55g
-CVE-2026-121395 [GHSA-cg4f-57hc-v7w7]
+CVE-2026-121395 (FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cg4f-57hc-v7w7
-CVE-2026-121388 [GHSA-rrp5-666j-g6gp]
+CVE-2026-121388 (FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource all ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rrp5-666j-g6gp
-CVE-2026-121387 [GHSA-wg7g-gx9g-r96c]
+CVE-2026-121387 (FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerabili ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wg7g-gx9g-r96c
@@ -37743,31 +38070,31 @@ CVE-2026-XXXX [GHSA-f53w-3364-jr35]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f53w-3364-jr35
-CVE-2026-121389 [GHSA-66mr-7wc7-23vc]
+CVE-2026-121389 (FreeRDP from 3.27.0 before 3.32.2 contains a denial of service vulnera ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-66mr-7wc7-23vc
-CVE-2026-121390 [GHSA-hqf8-95c7-6r92]
+CVE-2026-121390 (FreeRDP 3.0.0 before 3.32.2 built with WITH_AAD=ON contains a reachabl ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-hqf8-95c7-6r92
-CVE-2026-121391 [GHSA-8g9g-hqqp-fw69]
+CVE-2026-121391 (FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in pa ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8g9g-hqqp-fw69
-CVE-2026-121392 [GHSA-jq25-3374-4262]
+CVE-2026-121392 (FreeRDP before 3.32.2 contains an improper certificate validation vuln ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-jq25-3374-4262
-CVE-2026-121393 [GHSA-7qw2-8h66-pvpw]
+CVE-2026-121393 (FreeRDP from 3.0.0 before 3.32.2 contains a denial of service vulnerab ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7qw2-8h66-pvpw
-CVE-2026-121394 [GHSA-5j39-x36c-x9pm]
+CVE-2026-121394 (FreeRDP from 3.11.0 before 3.32.2 contains an assertion failure in the ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5j39-x36c-x9pm
-CVE-2026-121396 [GHSA-6p3w-fv52-cf24]
+CVE-2026-121396 (FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR asse ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6p3w-fv52-cf24
@@ -37775,23 +38102,23 @@ CVE-2026-XXXX [GHSA-4qq4-qwxq-49m8]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4qq4-qwxq-49m8
-CVE-2026-121397 [GHSA-x7w3-32ch-x2jq]
+CVE-2026-121397 (FreeRDP before 3.32.2 contains a heap buffer over-read vulnerability i ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x7w3-32ch-x2jq
-CVE-2026-121398 [GHSA-v3q2-qjvf-7rqw]
+CVE-2026-121398 (FreeRDP before 3.32.2 contains a cross-thread use-after-free vulnerabi ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-v3q2-qjvf-7rqw
-CVE-2026-121399 [GHSA-4vh4-3pc3-32p7]
+CVE-2026-121399 (FreeRDP before 3.32.2 contains a memory allocation vulnerability in rd ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-4vh4-3pc3-32p7
-CVE-2026-121400 [GHSA-x4x6-2hrm-hvq9]
+CVE-2026-121400 (FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rd ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x4x6-2hrm-hvq9
-CVE-2026-121401 [GHSA-8rjm-m7xg-mg6m]
+CVE-2026-121401 (FreeRDP before 3.32.2 contains a denial of service vulnerability where ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m
@@ -37831,27 +38158,27 @@ CVE-2026-XXXX [GHSA-x26g-fp9v-c2pg]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x26g-fp9v-c2pg
-CVE-2026-121402 [GHSA-c426-ppvf-jpfg]
+CVE-2026-121402 (FreeRDP before 3.32.2 contains a NULL pointer dereference vulnerabilit ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c426-ppvf-jpfg
-CVE-2026-121403 [GHSA-5qqp-5ffm-m3p9]
+CVE-2026-121403 (FreeRDP before 3.32.2 contains a denial of service vulnerability where ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-5qqp-5ffm-m3p9
-CVE-2026-121404 [GHSA-fqcj-rwww-2498]
+CVE-2026-121404 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqcj-rwww-2498
-CVE-2026-121405 [GHSA-r387-jjq3-87hv]
+CVE-2026-121405 (FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial de ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r387-jjq3-87hv
-CVE-2026-121406 [GHSA-2c9x-4gr7-hrwx]
+CVE-2026-121406 (FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_o ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-2c9x-4gr7-hrwx
-CVE-2026-121407 [GHSA-x8vp-ff7m-294g]
+CVE-2026-121407 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x8vp-ff7m-294g
@@ -37863,11 +38190,11 @@ CVE-2026-XXXX [GHSA-qw7w-hhxq-763c]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-qw7w-hhxq-763c
-CVE-2026-121408 [GHSA-w897-ffhv-5j7g]
+CVE-2026-121408 (FreeRDP before 3.32.2 contains a use-after-free in the urbdrc USB redi ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-w897-ffhv-5j7g
-CVE-2026-121409 [GHSA-3hf9-w6hr-hf9j]
+CVE-2026-121409 (FreeRDP before 3.32.2 contains a denial of service vulnerability that ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3hf9-w6hr-hf9j
@@ -37875,7 +38202,7 @@ CVE-2026-XXXX [GHSA-j536-qc58-pmf8]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-j536-qc58-pmf8
-CVE-2026-121410 [GHSA-fqw6-jf2h-6fj6]
+CVE-2026-121410 (FreeRDP before 3.32.2 contains a denial of service vulnerability in th ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fqw6-jf2h-6fj6
@@ -37883,7 +38210,7 @@ CVE-2026-XXXX [GHSA-cx9c-q4jc-wm6c]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-cx9c-q4jc-wm6c
-CVE-2026-121411 [GHSA-wffv-rjv2-h2x2]
+CVE-2026-121411 (FreeRDP before 3.32.2 fails to bound server-supplied target dimensions ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-wffv-rjv2-h2x2
@@ -37895,7 +38222,7 @@ CVE-2026-XXXX [GHSA-q82v-5wjg-6h57]
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-q82v-5wjg-6h57
-CVE-2026-121412 [GHSA-m7xq-5f7v-hjvw]
+CVE-2026-121412 (FreeRDP from 3.0.0 before 3.32.2 contains an uncontrolled resource con ...)
- freerdp3 3.32.2+dfsg-1
- freerdp2 <removed>
NOTE: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m7xq-5f7v-hjvw
@@ -40806,7 +41133,7 @@ CVE-2026-107376 (webonyx graphql-php is a PHP implementation of the GraphQL spec
NOT-FOR-US: webonyx graphql-php
CVE-2026-107375 (JHipster is a development platform to quickly generate, develop, and d ...)
NOT-FOR-US: JHipster
-CVE-2026-107362 (Malcolm file-upload component ships the upstream FilePond PHP server ( ...)
+CVE-2026-107362 (The bundled FilePond PHP server in Malcolm's file-upload component exp ...)
NOT-FOR-US: CISA Malcolm
CVE-2026-107361 (The Arkime live capture service (arkime-live) in Malcolm runs with net ...)
NOT-FOR-US: CISA Malcolm
@@ -52539,39 +52866,39 @@ CVE-2026-102730 (Mounting an attacker-controlled NAND flash image (`lx_nand_flas
NOT-FOR-US: Eclipse
CVE-2026-102729 (`gx_binres_theme_load()` sizes its theme buffer for the theme it was a ...)
NOT-FOR-US: Eclipse
-CVE-2026-102728 (Two client-side TLS/DTLS handshake parsers in NetX Secure read fields ...)
+CVE-2026-102728 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the Ne ...)
NOT-FOR-US: Eclipse
-CVE-2026-102727 (FTP Passive Data Connection Not Bound to the Authenticated Control Pee ...)
+CVE-2026-102727 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FT ...)
NOT-FOR-US: Eclipse
-CVE-2026-102726 (Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bou ...)
+CVE-2026-102726 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the PP ...)
NOT-FOR-US: Eclipse
-CVE-2026-102725 (Out-of-bounds Read from Unvalidated MSRP Attribute List Length)
+CVE-2026-102725 (In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, buil ...)
NOT-FOR-US: Eclipse
-CVE-2026-102724 (NULL Pointer Dereference When Evicting the Sole MSRP Attribute)
+CVE-2026-102724 (In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, buil ...)
NOT-FOR-US: Eclipse
-CVE-2026-102723 (NULL Pointer Dereference on MSRP Attribute Table Exhaustion)
+CVE-2026-102723 (In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, buil ...)
NOT-FOR-US: Eclipse
-CVE-2026-102722 (In the IPv4 PASV path, the FTP Client accepts whatever address was sen ...)
+CVE-2026-102722 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FT ...)
NOT-FOR-US: Eclipse
-CVE-2026-102721 (A TFTP server that answers with a short ERROR packet makes the client ...)
+CVE-2026-102721 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the TF ...)
NOT-FOR-US: Eclipse
-CVE-2026-102720 (A DHCP server, or anyone on the LAN who answers a DISCOVER first, can ...)
+CVE-2026-102720 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the DH ...)
NOT-FOR-US: Eclipse
-CVE-2026-102719 (Predictable DTLS HelloVerifyRequest Cookie in NetX Secure)
+CVE-2026-102719 (In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the Ne ...)
NOT-FOR-US: Eclipse
-CVE-2026-102718 (hey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon do ...)
+CVE-2026-102718 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
-CVE-2026-102716 (An unauthenticated client can drain the RTSP server's packet pool with ...)
+CVE-2026-102716 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
-CVE-2026-102715 (Any host on the LAN can send two mDNS records and make the responder w ...)
+CVE-2026-102715 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
-CVE-2026-102714 (`_nx_icmpv6_validate_options()` scans the option area with `while (len ...)
+CVE-2026-102714 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
-CVE-2026-102713 (The TFTP server accepts a DATA datagram of any size. The dispatcher re ...)
+CVE-2026-102713 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
-CVE-2026-102712 (On the first DTLS ClientHello, the parser copies a device-claimed sess ...)
+CVE-2026-102712 (In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, ...)
NOT-FOR-US: Eclipse
-CVE-2026-102711 (Two issues in the ThreadX loadable-module loader, reached when a devic ...)
+CVE-2026-102711 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Man ...)
NOT-FOR-US: Eclipse
CVE-2026-102710 (In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ ...)
NOT-FOR-US: Eclipse
@@ -57674,7 +58001,8 @@ CVE-2026-97619 (In the Linux kernel, the following vulnerability has been resolv
{DSA-6568-1 DLA-4850-1}
- linux 7.2.7-1
NOTE: https://git.kernel.org/linus/796aa0547557e63338657ed1c487906f9fac4c73 (7.3-rc3)
-CVE-2026-97618 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-97618
+ REJECTED
{DSA-6568-1 DLA-4850-1}
- linux 7.2.7-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
@@ -64740,7 +65068,7 @@ CVE-2026-85495
[trixie] - ppp <no-dsa> (Minor issue)
[bookworm] - ppp <postponed> (Minor issue)
NOTE: https://github.com/ppp-project/ppp/security/advisories/GHSA-frhv-j822-2pvx
-CVE-2026-75883 (The code in pppd that formats a response to a PEAP Request packet in p ...)
+CVE-2026-75883 (A flaw was found in pppd. A remote attacker could exploit a buffer ove ...)
- ppp <unfixed> (bug #1148816)
[trixie] - ppp <no-dsa> (Minor issue)
[bookworm] - ppp <not-affected> (PEAP support introduced in 2.5.0)
@@ -78698,11 +79026,13 @@ CVE-2026-81011 (In the Linux kernel, the following vulnerability has been resolv
- linux 7.2.6-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/e0ddfd77c0c320b7d12b6c9169303b140b798775 (7.3-rc1)
-CVE-2026-81010 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-81010
+ REJECTED
- linux 7.2.6-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/14572de82e5022899e5856008bc9cac97004a88c (7.3-rc1)
-CVE-2026-81009 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-81009
+ REJECTED
- linux 7.2.6-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
@@ -87933,7 +88263,8 @@ CVE-2026-80813 (In the Linux kernel, the following vulnerability has been resolv
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/79aba4c9403419d822972d2851f2a96a2c0531cf (7.3-rc1)
-CVE-2026-80811 (In the Linux kernel, the following vulnerability has been resolved: i ...)
+CVE-2026-80811
+ REJECTED
- linux 7.1.12-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
@@ -125541,7 +125872,7 @@ CVE-2026-11983 (The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordP
NOT-FOR-US: WordPress plugin
CVE-2026-0673 (The Element Pack Addons for Elementor plugin for WordPress is vulnerab ...)
NOT-FOR-US: WordPress plugin
-CVE-2026-0637 (When an Event Publisher output adapter is configured with irrelevant p ...)
+CVE-2026-0637 (When a proxy server is configured with `customUrl.enabled`, the compon ...)
NOT-FOR-US: WSO2
CVE-2025-9266 (The Accelerate theme for WordPress is vulnerable to unauthorized modif ...)
NOT-FOR-US: WordPress plugin
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec2793a0ad401254e6d83b79e2e78543e6e8058d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec2793a0ad401254e6d83b79e2e78543e6e8058d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/fd3aeb9d/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list