[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0a390a11 by Salvatore Bonaccorso at 2026-10-01T21:28:11+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47,7 +47,7 @@ CVE-2026-95588 (Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsl
 CVE-2026-95137
 	REJECTED
 CVE-2026-94620 (Classroom 50 is a free and open-source tool for managing and grading p ...)
-	TODO: check
+	NOT-FOR-US: Classroom 50
 CVE-2026-94390 (Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-94276 (Improper Authentication vulnerability in Apache APISIX.  On a route us ...)
@@ -85,13 +85,13 @@ CVE-2026-84682 (A command injection vulnerability exists in the TDDPv2 service (
 CVE-2026-82806 (Exposure of data element to wrong session vulnerability in Apache APIS ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-7176 (CVE-2026-7176: the Help text and Title parameters in the endpoint /eve ...)
-	TODO: check
+	NOT-FOR-US: Crocantickets Entradium
 CVE-2026-7175 (CVE-2026-7175: the Business Name parameter in the /promoters/edit endp ...)
-	TODO: check
+	NOT-FOR-US: Crocantickets Entradium
 CVE-2026-7174 (CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, ...)
-	TODO: check
+	NOT-FOR-US: Crocantickets Entradium
 CVE-2026-7173 (CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Cro ...)
-	TODO: check
+	NOT-FOR-US: Crocantickets Entradium
 CVE-2026-79901 (In deployments using BoKS keytab management, affected versions of boks ...)
 	NOT-FOR-US: Fortra
 CVE-2026-79900 (boks_ksllogsd accepts a checksum algorithm name in the MD field of an  ...)
@@ -107,7 +107,7 @@ CVE-2026-78578 (Tapo C120 v1 and C200 v5 do not enforce authentication for do me
 CVE-2026-78577 (Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboardi ...)
 	NOT-FOR-US: TPLink
 CVE-2026-78249 (A path traversal vulnerability exists in the web management interface  ...)
-	TODO: check
+	NOT-FOR-US: Fujifilm Apeos
 CVE-2026-78242 (Insertion of sensitive information into log file vulnerability in Apac ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-77387 (geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point a ...)
@@ -117,9 +117,9 @@ CVE-2026-75957 (The Ultimate Multisite \u2013 WordPress Multisite SaaS & WaaS Pl
 CVE-2026-75786 (Unsanitized concatenation of the module parameter in the Grafana datas ...)
 	NOT-FOR-US: Pandora FMS
 CVE-2026-73976 (djehuty is a research data repository system developed by 4TU.Research ...)
-	TODO: check
+	NOT-FOR-US: djehuty
 CVE-2026-73975 (djehuty is a research data repository system developed by 4TU.Research ...)
-	TODO: check
+	NOT-FOR-US: djehuty
 CVE-2026-68496 (The Smile parser in FasterXML jackson-dataformats-binary never invokes ...)
 	TODO: check
 CVE-2026-68495 (The CBOR parser in FasterXML jackson-dataformats-binary never invokes  ...)
@@ -1205,7 +1205,7 @@ CVE-2026-94673 (Unauthenticated Insecure Direct Object References (IDOR) in Simp
 CVE-2026-94672 (Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2. ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-94545 (Satori is a library to convert HTML and CSS to SVG. Starting in versio ...)
-	TODO: check
+	NOT-FOR-US: Satori
 CVE-2026-94499 (Subscriber Broken Access Control in FormGent <= 1.12.2 versions.)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-94389 (Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newslet ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a390a115237b8fcb40097acead35341d25bcff6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0a390a115237b8fcb40097acead35341d25bcff6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/69d83d98/attachment-0001.htm>