[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 2 21:21:37 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
59471ecc by Salvatore Bonaccorso at 2026-10-02T22:21:17+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -206,9 +206,9 @@ CVE-2026-85476 (Loop with unreachable exit condition ('infinite loop') vulnerabi
 	- thrift <unfixed>
 	NOTE: https://lists.apache.org/thread/1zdvscq7p3hf3z30s26h4tm9dvljm1jj
 CVE-2026-85215 (Improper neutralization of special elements used in an SQL command ('S ...)
-	TODO: check
+	NOT-FOR-US: Paperwork
 CVE-2026-85209 (Missing Authorization vulnerability in AVEZ Electronics Communication  ...)
-	TODO: check
+	NOT-FOR-US: AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS)
 CVE-2026-85088 (Improper Validation of Certificate with Host Mismatch in the C++ and D ...)
 	- thrift <unfixed>
 	NOTE: https://lists.apache.org/thread/zcgm7lx6037lvgvn87rc1tj3p0zhv371
@@ -234,13 +234,13 @@ CVE-2026-82458 (Memory allocation with excessive size value, Allocation of resou
 	- thrift <unfixed>
 	NOTE: https://lists.apache.org/thread/7xqf651pvjykw0xr9vw0ooz0bwx7wzy7
 CVE-2026-80464 (Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef  ...)
-	TODO: check
+	NOT-FOR-US: Sef AI Chatbot Platform
 CVE-2026-80443 (Improper certificate validation vulnerability in HAVELSAN Inc. Sef - A ...)
-	TODO: check
+	NOT-FOR-US: Sef AI Chatbot Platform
 CVE-2026-80337 (Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot  ...)
-	TODO: check
+	NOT-FOR-US: Sef AI Chatbot Platform
 CVE-2026-80298 (Improper neutralization of special elements used in an SQL command ('S ...)
-	TODO: check
+	NOT-FOR-US: Sef AI Chatbot Platform
 CVE-2026-67989 (crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 cont ...)
 	TODO: check
 CVE-2026-66859 (NULL Pointer Dereference, Use of Uninitialized Variable vulnerability  ...)
@@ -438,77 +438,77 @@ CVE-2026-104609 (A weakness has been identified in onetwothreeneth HospitalManag
 CVE-2026-104606 (A security flaw has been discovered in itsourcecode Online Admission S ...)
 	NOT-FOR-US: itsourcecode System
 CVE-2026-104473 (YesWiki before 4.5.3 contains multiple reflected cross-site scripting  ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104472 (YesWiki before 4.6.7 contains a missing authorization vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104471 (YesWiki before 4.6.7 contains an unrestricted file upload vulnerabilit ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104470 (YesWiki before 4.6.7 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104469 (YesWiki before 4.6.7 contains a session fixation vulnerability that al ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104468 (YesWiki before 4.6.7 contains an insufficient session expiration vulne ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104467 (YesWiki before 4.6.7 contains an authorization bypass vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104466 (YesWiki before 4.6.7 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104465 (YesWiki before 4.6.7 contains a reflected cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104464 (YesWiki before 4.6.7 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104463 (YesWiki before 4.6.7 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104462 (YesWiki before 4.6.7 contains an SQL injection vulnerability in the Ba ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104461 (YesWiki before 4.6.7 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104460 (YesWiki before 4.6.7 contains a blind SQL injection vulnerability in t ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104459 (YesWiki before 4.6.7 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104458 (YesWiki before 4.6.7 contains a server-side request forgery vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104457 (YesWiki before 4.6.7 contains an SQL injection vulnerability in the Ba ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104456 (YesWiki before 4.6.7 contains a second-order SQL injection vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104455 (YesWiki before 4.6.7 contains an access control bypass vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104454 (YesWiki before 4.6.7 contains an algorithmic-complexity denial of serv ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104453 (YesWiki before 4.6.7 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104452 (YesWiki before 4.6.7 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104451 (YesWiki before 4.6.7 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104450 (YesWiki before 4.6.7 contains a missing authorization flaw in the poin ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104449 (YesWiki before 4.6.7 contains an access control vulnerability allowing ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104448 (YesWiki before 4.6.7 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104447 (YesWiki before 4.6.7 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104446 (YesWiki before 4.6.7 contains an authentication bypass in the contact  ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104445 (YesWiki before 4.6.7 contains an authentication bypass vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104444 (YesWiki before 4.6.7 contains an authorization bypass vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104443 (YesWiki before 4.6.7 contains an empty-filter scope bypass in the trip ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104442 (YesWiki before 4.6.7 contains an unauthenticated server-side request f ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104441 (YesWiki before 4.6.7 contains an unauthenticated server-side request f ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104440 (YesWiki before 4.6.7 contains a blind server-side request forgery vuln ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104439 (YesWiki before 4.6.7 contains a user enumeration vulnerability in Lost ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104438 (YesWiki before 4.6.7 contains a missing authorization vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: YesWiki
 CVE-2026-104437 (Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 ...)
 	TODO: check
 CVE-2026-104436 (Zebra before 4.5.0 contains an uncontrolled resource consumption vulne ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59471ecc14cc1406b59fce02374babf3a1dd8b70

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59471ecc14cc1406b59fce02374babf3a1dd8b70
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261002/619edfb1/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list