[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
498c63da by Moritz Muehlenhoff at 2026-11-04T23:32:43+01:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,5 @@
+CVE-2026-116498
+	NOT-FOR-US: Kiali
 CVE-2026-115697
 	- iwd <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2560193
@@ -66,7 +68,7 @@ CVE-2026-59264 (The Windows installers of Apache OpenOffice 4.1.16 and earlier a
 CVE-2026-59263 (A manipulated document opened in Apache OpenOffice 4.1.16 or earlier m ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-57853 (DataGerry before 3.3.0 contains a server-side template injection vulne ...)
-	TODO: check
+	NOT-FOR-US: DataGerry
 CVE-2026-57775 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-57666 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -78,9 +80,9 @@ CVE-2026-56065 (Insertion of Sensitive Information into Externally-Accessible Fi
 CVE-2026-54861 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-39431 (On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API func ...)
-	TODO: check
+	NOT-FOR-US: HP Poly EagleEye Cube USB
 CVE-2026-39430 (On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator a ...)
-	TODO: check
+	NOT-FOR-US: HP Poly EagleEye Cube USB
 CVE-2026-20241 (A vulnerability in the authorization mechanism of Cisco Identity Servi ...)
 	TODO: check
 CVE-2026-19731 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
@@ -88,15 +90,15 @@ CVE-2026-19731 (Improper Limitation of a Pathname to a Restricted Directory ('Pa
 CVE-2026-19721 (Improper restriction of XML external entity reference vulnerability in ...)
 	TODO: check
 CVE-2026-122148 (In Yealink MeetingBoard Pro before 331.320.0.64, the Web management mo ...)
-	TODO: check
+	NOT-FOR-US: Yealink
 CVE-2026-122124 (On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with shor ...)
-	TODO: check
+	NOT-FOR-US: Yealink
 CVE-2026-122120 (In Yealink Plug-in Softwares before 2.35.219.0, there is an unauthoriz ...)
-	TODO: check
+	NOT-FOR-US: Yealink
 CVE-2026-122118 (In certain Yealink products before 2026-04-15, when the Wi-Fi AP funct ...)
-	TODO: check
+	NOT-FOR-US: Yealink
 CVE-2026-122116 (Certain Yealink terminal devices before 2026-04-21 contain an improper ...)
-	TODO: check
+	NOT-FOR-US: Yealink
 CVE-2026-122054 (Converting crafted BIG-HKSCS input to UCS-4 or the internal wide chara ...)
 	TODO: check
 CVE-2026-122008 (Oqtane Framework before 10.3.0 contains a server-side request forgery  ...)
@@ -114,7 +116,7 @@ CVE-2026-121970 (Pay with Vipps and MobilePay for WooCommerce (woo-vipps) before
 CVE-2026-121967 (Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35 ...)
 	TODO: check
 CVE-2026-121966 (Traefik 2.x before 2.11.60 and 3.x before 3.7.16 sends ForwardAuth sub ...)
-	TODO: check
+	- traefik <itp> (bug #983289)
 CVE-2026-121965 (Parse Server before 8.6.113 and 9.0.0 before 9.10.6-alpha.5 contains a ...)
 	NOT-FOR-US: Parse Server
 CVE-2026-121946 (zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498c63dad949768cdd27400b2ad304a918c4e3f1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/498c63dad949768cdd27400b2ad304a918c4e3f1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/af5996ae/attachment.htm>