[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5797fa06 by Salvatore Bonaccorso at 2026-10-01T09:50:59+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,9 +19,9 @@ CVE-2026-92412 (The Five Star Restaurant Reviews WordPress plugin before 2.3.14
 CVE-2026-92245 (The Simply Schedule Appointments plugin for WordPress is vulnerable to ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92173 (Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver cou ...)
-	TODO: check
+	NOT-FOR-US: Meta Horizon OS
 CVE-2026-92172 (Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be  ...)
-	TODO: check
+	NOT-FOR-US: Meta Horizon OS
 CVE-2026-91109 (The Simply Schedule Appointments plugin for WordPress is vulnerable to ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-90974 (The WP Fusion Lite  WordPress plugin before 3.48.0 does not require au ...)
@@ -57,23 +57,23 @@ CVE-2026-81809 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does not
 CVE-2026-81739 (The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanit ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-80276 (Comelit Multi-User Gateway for VIP System (model 1456B) firmware versi ...)
-	TODO: check
+	NOT-FOR-US: Comelit Multi-User Gateway for VIP System (model 1456B) firmware
 CVE-2026-80275 (Comelit Multi-User Gateway for VIP System (model 1456B) firmware versi ...)
-	TODO: check
+	NOT-FOR-US: Comelit Multi-User Gateway for VIP System (model 1456B) firmware
 CVE-2026-78210 (In affected versions of Octopus Server, users with certain scoped perm ...)
 	NOT-FOR-US: Octopus Deploy
 CVE-2026-76147 (A path traversal (ZIP Slip) vulnerability caused by insufficient autho ...)
-	TODO: check
+	NOT-FOR-US: Genian
 CVE-2026-76146 (An OS command injection vulnerability in Genian SSL PNS allows an atta ...)
-	TODO: check
+	NOT-FOR-US: Genian
 CVE-2026-76145 (An improper privilege management vulnerability in Genian SSL PNS allow ...)
-	TODO: check
+	NOT-FOR-US: Genian
 CVE-2026-76144 (An unrestricted file upload vulnerability caused by insufficient file  ...)
-	TODO: check
+	NOT-FOR-US: Genian
 CVE-2026-76143 (A missing authorization vulnerability in Genian SSL PNS allows an atta ...)
-	TODO: check
+	NOT-FOR-US: Genian
 CVE-2026-76142 (Insufficient authentication and access control on the internal-only IP ...)
-	TODO: check
+	NOT-FOR-US: Genian
 CVE-2026-67075 (HCL Digital Experience is affected by improper input sanitation. This  ...)
 	NOT-FOR-US: HCL
 CVE-2026-51872 (Devika v1.0 is vulnerable to Code Injection via the Runner.run_code fu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5797fa06ada18bf6ede85d633094abb662d2e71f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5797fa06ada18bf6ede85d633094abb662d2e71f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/424e259f/attachment.htm>