[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 1 08:14:22 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dc2cfc76 by security tracker role at 2026-10-01T07:14:15+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,67 +1,67 @@
CVE-2026-96561 (The AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plu ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96255 (The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96200 (The Payments for Hubtel WordPress plugin before 1.0.2 does not verify ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96173 (The Payments for Hubtel WordPress plugin before 1.0.2 does not verify ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-93495 (Improper initialization in an ASUS certain motherboard allows an physi ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-92966 (The The Appointment Booking Plugin \u2013 LatePoint | Calendar & Sched ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92548 (The WP Popular Posts plugin for WordPress is vulnerable to Sensitive I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92537 (The Newsletter \u2013 Send awesome emails from WordPress plugin for Wo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92412 (The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92245 (The Simply Schedule Appointments plugin for WordPress is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92173 (Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver cou ...)
TODO: check
CVE-2026-92172 (Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be ...)
TODO: check
CVE-2026-91109 (The Simply Schedule Appointments plugin for WordPress is vulnerable to ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-90974 (The WP Fusion Lite WordPress plugin before 3.48.0 does not require au ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-90972 (The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89296 (The Pro Like Button WordPress plugin before 2.0 does not properly sani ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88999 (The Redux Framework plugin for WordPress is vulnerable to authorizatio ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87973 (The If-So Dynamic Content WordPress plugin before 1.10.2 does not san ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87970 (The If-So Dynamic Content WordPress plugin before 1.10.2 does not esc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86610 (The Download Manager WordPress plugin before 3.3.71 does not sufficien ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85679 (The Extendify plugin for WordPress is vulnerable to Stored Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82829 (Hitachi Coding Software Suite contains a vulnerability related to Hidd ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82828 (Hitachi Coding Software Suite contains an Incorrect Authorization vuln ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82827 (Hitachi Coding Software Suite contains a vulnerability related to Use ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82826 (Hitachi Coding Software Suite contains a vulnerability related to the ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82825 (Hitachi Coding Software Suite contains a vulnerability related to Miss ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82824 (Hitachi Coding Software Suite contains a vulnerability related to Path ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-81809 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does not prope ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81739 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-80276 (Comelit Multi-User Gateway for VIP System (model 1456B) firmware versi ...)
TODO: check
CVE-2026-80275 (Comelit Multi-User Gateway for VIP System (model 1456B) firmware versi ...)
TODO: check
CVE-2026-78210 (In affected versions of Octopus Server, users with certain scoped perm ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-76147 (A path traversal (ZIP Slip) vulnerability caused by insufficient autho ...)
TODO: check
CVE-2026-76146 (An OS command injection vulnerability in Genian SSL PNS allows an atta ...)
@@ -75,7 +75,7 @@ CVE-2026-76143 (A missing authorization vulnerability in Genian SSL PNS allows a
CVE-2026-76142 (Insufficient authentication and access control on the internal-only IP ...)
TODO: check
CVE-2026-67075 (HCL Digital Experience is affected by improper input sanitation. This ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-51872 (Devika v1.0 is vulnerable to Code Injection via the Runner.run_code fu ...)
TODO: check
CVE-2026-51871 (Devika v1.0 is vulnerable to Code Injection in the Runner.execute func ...)
@@ -115,13 +115,13 @@ CVE-2026-51568 (modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Trave
CVE-2026-47096 (AJA HELO Plus firmware before 2.1.7 contains a stored cross-site scrip ...)
TODO: check
CVE-2026-19253 (The Cache Enabler WordPress plugin before 1.8.17 does not validate a U ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14157 (Use of an Externally Controlled Format String in the ASUS Router modul ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-13313 (An Active Debug Code vulnerability in certain ASUS router models allow ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2026-12241 (The Advanced Woo Labels \u2013 Product Labels & Badges for WooCommerce ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103641 (A flaw was found in GEGL. The Radiance HDR loader reads past the end o ...)
TODO: check
CVE-2026-103592 (simple-php-router through 5.4.1.7 contains an IP restriction bypass vu ...)
@@ -141,13 +141,13 @@ CVE-2026-103585 (Improper neutralization of Script-Related HTML tags in a web pa
CVE-2026-103584 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
TODO: check
CVE-2026-103548 (Improperly stored passwords in the config file in Itron MV-90 xi 3.0 a ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2026-103547 (In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, d ...)
TODO: check
CVE-2026-103544 (A vulnerability was found in datadrivenconstruction OpenConstructionER ...)
TODO: check
CVE-2026-103543 (A vulnerability has been found in itsourcecode Leave Management System ...)
- TODO: check
+ NOT-FOR-US: itsourcecode System
CVE-2026-103542 (A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacte ...)
TODO: check
CVE-2026-103541 (A vulnerability was detected in formtools.org Form Tools up to 3.1.1. ...)
@@ -323,21 +323,21 @@ CVE-2026-101887 (BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vul
CVE-2026-101885 (ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain ...)
TODO: check
CVE-2026-101884 (OpenClaw Windows Node before 2026.7.1 contains an incomplete environme ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101883 (OpenClaw Windows Node through 2026.9.4 contains a server-side request ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101882 (OpenClaw Windows Node before 2026.7.1 contains an incomplete validatio ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101881 (OpenClaw Windows Node before 2026.7.1 contains an allocation of resour ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101880 (OpenClaw Windows Node before 2026.7.1 contains an incorrect authorizat ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101879 (OpenClaw Windows Node before 2026.7.1-3 contains a missing authorizati ...)
- TODO: check
+ NOT-FOR-US: OpenClaw
CVE-2026-101148 (The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 d ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101147 (The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Feat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-41753 (The object name of a dynamically created BACnet File Object is interpr ...)
TODO: check
CVE-2024-58387 (Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc2cfc769fe7a8fc100a67ff94e7d8dfb32e4154
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc2cfc769fe7a8fc100a67ff94e7d8dfb32e4154
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/626fa7ff/attachment.htm>
More information about the debian-security-tracker-commits
mailing list