[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cf84b1e6 by Salvatore Bonaccorso at 2026-10-06T09:35:58+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,11 +3,11 @@ CVE-2026-97300 (Unauthenticated Broken Access Control in WP Event Solution <= 4.
 CVE-2026-97257 (Deserialization of Untrusted Data vulnerability in PressTigers Simple  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95265 (Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerab ...)
-	TODO: check
+	NOT-FOR-US: Feehi CMS
 CVE-2026-95264 (Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated ...)
-	TODO: check
+	NOT-FOR-US: Feehi CMS
 CVE-2026-95263 (Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privi ...)
-	TODO: check
+	NOT-FOR-US: Feehi CMS
 CVE-2026-94299 (The elegro Crypto Payment WordPress plugin through 1.0.1 does not requ ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94293 (An unauthenticated remote attacker can modify Asset Administration She ...)
@@ -19,7 +19,7 @@ CVE-2026-94271 (The Deema Payment Gateway WordPress plugin through 1.1.2 does no
 CVE-2026-94270 (The Deema Payment Gateway WordPress plugin through 1.1.2 does not veri ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94201 (Ash stores :atom-typed attributes as strings and compares them as stri ...)
-	TODO: check
+	NOT-FOR-US: ash-project
 CVE-2026-93617 (Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshin ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-93326 (A build step for a Git source, crafted in a specific way, can bypass s ...)
@@ -37,13 +37,13 @@ CVE-2026-93315 (When proxy networking with CA injection is enabled, a build can
 CVE-2026-92821 (A flaw was found in SSSD. When configured to evaluate password expirat ...)
 	TODO: check
 CVE-2026-91107 (openSIS Classic 9.3 allows an authenticated user with the built-in tea ...)
-	TODO: check
+	NOT-FOR-US: OS4ED openSIS
 CVE-2026-89289 (The Fast Courier  WordPress plugin through 5.2.3 does not restrict an  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-86786 (The Slider Pro WordPress plugin through 1.0.0 does not perform any cap ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84900 (Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could p ...)
-	TODO: check
+	NOT-FOR-US: HP
 CVE-2026-82989 (There is an input injection in vCast exposed network services in ViewS ...)
 	TODO: check
 CVE-2026-82988 (There exists an arbitrary file download in vCast APK delivery mechanis ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf84b1e689e3ffb85167d1217f9b9698e2b279d5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf84b1e689e3ffb85167d1217f9b9698e2b279d5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/a1ec346c/attachment.htm>