[Git][security-tracker-team/security-tracker][master] Process some NFUs

Tue Oct 6 09:02:57 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6e144113 by Salvatore Bonaccorso at 2026-10-06T10:02:34+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,7 +11,7 @@ CVE-2026-95263 (Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low
 CVE-2026-94299 (The elegro Crypto Payment WordPress plugin through 1.0.1 does not requ ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94293 (An unauthenticated remote attacker can modify Asset Administration She ...)
-	TODO: check
+	NOT-FOR-US: Murrelektronik GmbH
 CVE-2026-94278 (The File Media Renamer WordPress plugin through 1.3 does not verify th ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-94271 (The Deema Payment Gateway WordPress plugin through 1.1.2 does not veri ...)
@@ -46,29 +46,29 @@ CVE-2026-86786 (The Slider Pro WordPress plugin through 1.0.0 does not perform a
 CVE-2026-84900 (Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could p ...)
 	NOT-FOR-US: HP
 CVE-2026-82989 (There is an input injection in vCast exposed network services in ViewS ...)
-	TODO: check
+	NOT-FOR-US: ViewSonic ViewBoard
 CVE-2026-82988 (There exists an arbitrary file download in vCast APK delivery mechanis ...)
-	TODO: check
+	NOT-FOR-US: ViewSonic ViewBoard
 CVE-2026-78862 (An issue in Mercusys AC12 V2 allows a local attacker to execute arbitr ...)
-	TODO: check
+	NOT-FOR-US: Mercusys AC12 V2
 CVE-2026-78861 (An issue in Mercusys AC12 V2 allows a local attacker to execute arbitr ...)
-	TODO: check
+	NOT-FOR-US: Mercusys AC12 V2
 CVE-2026-78860 (An issue in Mercusys AC12 V2 allows a local attacker to execute arbitr ...)
-	TODO: check
+	NOT-FOR-US: Mercusys AC12 V2
 CVE-2026-77226 (Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vuln ...)
-	TODO: check
+	NOT-FOR-US: Camunda
 CVE-2026-75962 (The Post SMTP \u2013 Complete Email Deliverability and SMTP Solution w ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-71299 (A flaw was found in Maestro. Its REST API write endpoints were registe ...)
-	TODO: check
+	NOT-FOR-US: openshift-online/maestro
 CVE-2026-71298 (A flaw was found in maestro. A remote attacker could exploit a SQL inj ...)
-	TODO: check
+	NOT-FOR-US: openshift-online/maestro
 CVE-2026-71297 (A flaw was found in the maestro gRPC broker. This vulnerability allows ...)
-	TODO: check
+	NOT-FOR-US: openshift-online/maestro
 CVE-2026-59358 (Improper authentication (CWE-287) in the OAuth token endpoint in Cloud ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry
 CVE-2026-59357 (Insufficient verification of data authenticity (CWE-345) in the extern ...)
-	TODO: check
+	NOT-FOR-US: Cloud Foundry
 CVE-2026-57559 (Memory corruption while processing service requests.)
 	NOT-FOR-US: Qualcomm
 CVE-2026-57555 (Memory Corruption when executing system service routines due to improp ...)
@@ -130,17 +130,17 @@ CVE-2026-105782 (Scrapy is a high-level web crawling and scraping framework for
 CVE-2026-105778 (A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affect ...)
 	NOT-FOR-US: Tenda
 CVE-2026-105776 (A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Mon ...)
-	TODO: check
+	NOT-FOR-US: bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL
 CVE-2026-105775 (A security vulnerability has been detected in vllm-project vLLM up to  ...)
 	TODO: check
 CVE-2026-105773 (Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privile ...)
-	TODO: check
+	NOT-FOR-US: Canimaan Software ClamXAV
 CVE-2026-105768 (apko allows users to build and publish OCI container images built from ...)
-	TODO: check
+	NOT-FOR-US: apko
 CVE-2026-105767 (Improper Neutralization of Special Elements used in an OS Command in t ...)
-	TODO: check
+	NOT-FOR-US: Chainguard
 CVE-2026-105766 (Use of the backend-facing $scheme variable in the trailing-slash direc ...)
-	TODO: check
+	NOT-FOR-US: Chainguard
 CVE-2026-105764 (Immich is a high-performance self-hosted photo and video management so ...)
 	TODO: check
 CVE-2026-105763 (Twenty is an open-source CRM (customer relationship management) platfo ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e14411316cc9df7f006e981926a00062b1c6037

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e14411316cc9df7f006e981926a00062b1c6037
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/9a24ae31/attachment.htm>
