[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8260226b by Salvatore Bonaccorso at 2026-10-06T21:31:19+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,15 +9,15 @@ CVE-2026-95594 (Unauthenticated Privilege Escalation in SMS Alert Order Notifica
 CVE-2026-95526 (Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95153 (An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensi ...)
-	TODO: check
+	NOT-FOR-US: Bludit CMS
 CVE-2026-95140 (kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulner ...)
-	TODO: check
+	NOT-FOR-US: kkFileView
 CVE-2026-95105 (Reliance on Obfuscation or Encryption of Security-Relevant Inputs with ...)
-	TODO: check
+	NOT-FOR-US: danielberkompas cloak
 CVE-2026-94675 (Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On  ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-94206 (Use of Password Hash With Insufficient Computational Effort vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: danielberkompas cloak
 CVE-2026-91140 (An OS command injection vulnerability in the shell-based temporary-fil ...)
 	NOT-FOR-US: Progress Software
 CVE-2026-88252 (A flaw was found in sssd. A local user can cause a Denial of Service ( ...)
@@ -30,15 +30,15 @@ CVE-2026-86361 (Dell System Update, versions prior to 2.3.0.0, contains an Incor
 CVE-2026-86360 (Dell System Update, versions prior to 2.3.0.0, contains an Improper Li ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-85523 (Improper neutralization of special elements used in an OS command ('OS ...)
-	TODO: check
+	NOT-FOR-US: SambaBox
 CVE-2026-85153 (This vulnerability exists in the Schmooze app due to the use of hardco ...)
-	TODO: check
+	NOT-FOR-US: Schmooze app
 CVE-2026-84854 (In the WibuKey driver for Windows below Version 6.72, insufficient val ...)
-	TODO: check
+	NOT-FOR-US: WibuKey driver for Windows
 CVE-2026-83550 (A flaw was found in postgres-exporter. Due to the blank import of `net ...)
 	TODO: check
 CVE-2026-82924 (Improper Control of Interaction Frequency vulnerability in Pusula Comm ...)
-	TODO: check
+	NOT-FOR-US: Expert Mail
 CVE-2026-82531 (Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vul ...)
 	TODO: check
 CVE-2026-82162 (Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8260226ba8957a6f080249b8e51737e29bd9f26f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8260226ba8957a6f080249b8e51737e29bd9f26f
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/c26e9a37/attachment-0001.htm>