[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 7 22:07:04 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
870a1456 by Salvatore Bonaccorso at 2026-10-07T23:06:47+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -49,61 +49,61 @@ CVE-2026-78243 (Apache YuniKorn 1.8.0 and later, if configured with the LDAP gro
CVE-2026-76501 (A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Adm ...)
NOT-FOR-US: Cisco
CVE-2026-76500 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76499 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76498 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76488 (A vulnerability in the export policies functionality of Cisco Applicat ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76486 (A vulnerability in the VXLAN Operation, Administration, and Maintenanc ...)
NOT-FOR-US: Cisco
CVE-2026-76485 (A vulnerability in the VXLAN Operation, Administration, and Maintenanc ...)
NOT-FOR-US: Cisco
CVE-2026-76484 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76483 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76482 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76480 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76472 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76471 (A vulnerability in the NX-API feature of Cisco NX-OS Software could al ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76470 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76469 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76468 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76467 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76465 (A vulnerability in the MPLS Operation, Administration, and Maintenance ...)
NOT-FOR-US: Cisco
CVE-2026-76464 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76463 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76459 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76458 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76457 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76456 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76455 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76454 (A vulnerability in the Cisco Smart Licensing Utility API of Cisco Lice ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76453 (As part of Cisco's ongoing commitment to proactive security and produc ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76452 (A vulnerability in the web-based management interface of Cisco License ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76437 (A vulnerability in the web-based user interface of Cisco License On-Pr ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-62253 (Homer is open source telecom observability software. Prior to version ...)
NOT-FOR-US: Homer
CVE-2026-62252 (Homer is open source telecom observability software. Prior to version ...)
@@ -145,23 +145,23 @@ CVE-2026-42710 (Improper Neutralization of Special Elements used in an SQL Comma
CVE-2026-42708 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-42532 (A path traversal vulnerability exists in the EmailSheet extract_parts ...)
- TODO: check
+ NOT-FOR-US: VisiData
CVE-2026-41958 (A path traversal vulnerability exists in the unzip_http RemoteZipFile ...)
- TODO: check
+ NOT-FOR-US: VisiData
CVE-2026-33586 (Authenticated users are able to manipulate both the SMTP envelope \u20 ...)
- TODO: check
+ NOT-FOR-US: OVH infrastructure
CVE-2026-27434 (Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wp ...)
NOT-FOR-US: WordPress plugin or theme
CVE-2026-20362 (A vulnerability in the web-based management interface of Cisco Finesse ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20328 (A vulnerability in the web-based management interface of Cisco License ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20321 (A vulnerability in the web-based management API for Cisco Application ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20173 (A vulnerability in Cisco NX-OS Software could allow an unauthenticated ...)
NOT-FOR-US: Cisco
CVE-2026-20038 (A vulnerability in the endpoint group (EPG) contract functionality of ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-20032 (A vulnerability in the Python interpreter of Cisco NX-OS Software coul ...)
NOT-FOR-US: Cisco
CVE-2026-19186 (ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee80215 ...)
@@ -175,45 +175,45 @@ CVE-2026-107278 (MISP contains a validation flaw in its object synchronization l
CVE-2026-107276 (MISP contains a race condition in the email-based one-time password (O ...)
TODO: check
CVE-2026-107273 (Gophish 0.11.0 through 0.12.1 contains a server-side request forgery v ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107272 (Gophish through 0.12.1 contains stored and reflected cross-site script ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107271 (Gophish through 0.12.1 contains a rate limit bypass vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107270 (Gophish through 0.12.1 contains an insecure direct object reference vu ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107269 (Gophish through 0.12.1 contains a timing discrepancy vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Gophish
CVE-2026-107225 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107224 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107223 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107222 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107221 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107220 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107219 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107218 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107217 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107216 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107215 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107214 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107213 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107212 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107211 (Excelize is a Go language library for reading and writing Microsoft Ex ...)
- TODO: check
+ NOT-FOR-US: Excelize
CVE-2026-107210 (ImageMagick is free and open-source software used for editing and mani ...)
- imagemagick 8:7.1.2.31+dfsg1-1
NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc
@@ -230,17 +230,17 @@ CVE-2026-107208 (ImageMagick is free and open-source software used for editing a
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/907b74817836b4f88e7453f0e95c849a1c5311aa (7.1.2-30)
NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/6ba345f88a14fcce35c723c231914ae054c4281a (6.9.13-55)
CVE-2026-107207 (LMCache through 0.5.5 contains a server-side request forgery vulnerabi ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107206 (LMCache through 0.5.5 contains a missing authentication vulnerability ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107205 (LMCache through 0.5.5 contains a missing authentication vulnerability ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107204 (LMCache through 0.5.5 contains an unauthenticated remote code executio ...)
- TODO: check
+ NOT-FOR-US: LMCache
CVE-2026-107202 (A command injection vulnerability exists in the h-ui (version v0.0.25 ...)
- TODO: check
+ NOT-FOR-US: h-ui
CVE-2026-107194 (Sungrow iSolarCloud before 2026 allows authentication bypass and accou ...)
- TODO: check
+ NOT-FOR-US: Sungrow iSolarCloud
CVE-2026-107183 (llama.cpp before b11393 contains a use-after-free and double free vuln ...)
TODO: check
CVE-2026-107181 (Telegram Desktop before 7.2.9 contains an IPC record-separator injecti ...)
@@ -248,7 +248,7 @@ CVE-2026-107181 (Telegram Desktop before 7.2.9 contains an IPC record-separator
CVE-2026-107180 (On MISP instances configured to require TOTP enrolment (Security.otp_r ...)
TODO: check
CVE-2026-107177 (Express Gateway through 1.16.11 contains a hardcoded cryptographic key ...)
- TODO: check
+ NOT-FOR-US: Express Gateway
CVE-2026-107175 (MISP contains a defect in its event save workflow that prevents the co ...)
TODO: check
CVE-2026-107174 (A flaw was found in source-to-image. When unpacking archive files, the ...)
@@ -264,7 +264,7 @@ CVE-2026-107167 (A flaw was found in m17n-lib. A user providing specially crafte
CVE-2026-107166 (A weakness has been identified in Open5GS up to 2.7.7. This vulnerabil ...)
TODO: check
CVE-2026-107162 (Express Gateway through 1.16.11 contains an authentication bypass vuln ...)
- TODO: check
+ NOT-FOR-US: Express Gateway
CVE-2026-107159 (MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero ...)
TODO: check
CVE-2026-107151 (Missing authentication has been found in remote-execution task updates ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870a1456298115af1bf71ffdd5b3f7aee0126e75
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870a1456298115af1bf71ffdd5b3f7aee0126e75
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261007/befc61a4/attachment.htm>
More information about the debian-security-tracker-commits
mailing list