[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Oct 8 08:14:59 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
eb522c0d by security tracker role at 2026-10-08T07:14:49+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,215 +1,215 @@
CVE-2026-97717 (CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Ac ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97716 (CVE-2026-97716 is a vulnerability in the connection set up sub-system ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97715 (CVE-2026-97715is a vulnerability in the client registration process of ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97714 (CVE-2026-97714 is a is a vulnerability in the authentication sub-syste ...)
- TODO: check
+ NOT-FOR-US: Absolute Software
CVE-2026-97664
REJECTED
CVE-2026-94587 (A buffer overflow vulnerability exists in the WebTools administrative ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94586 (A command injection vulnerability exists in the WebTools administrativ ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94585 (An authentication bypass vulnerability exists in the web management in ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94584 (A race condition and thread-safety vulnerability exists in the web man ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94583 (A race condition vulnerability exists in the request processing logic ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94582 (A memory buffer overflow vulnerability exists in the internal diagnost ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94581 (An OS command injection vulnerability exists in the REST API managemen ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94580 (An arbitrary file and directory deletion vulnerability exists in the R ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94579 (An OS command injection vulnerability exists in the PAM (Pluggable Aut ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94578 (Brocade Fabric OS versions before 10.0.1 contain an authorization logi ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94577 (A privilege escalation vulnerability exists in the internal Command-Li ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94576 (An authentication logic and privilege escalation vulnerability exists ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94575 (A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-94275 (The Track Orders for WooCommerce WordPress plugin before 1.2.7 does n ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94258 (The SMS Alert WordPress plugin before 4.0.1 does not check that the a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94246 (The Wallet System for WooCommerce WordPress plugin before 2.8.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94245 (The Wallet System for WooCommerce WordPress plugin before 2.8.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94244 (The Wallet System for WooCommerce WordPress plugin before 2.8.0 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94154 (The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92862 (The Android application "Ticket Ryutsu Center" improperly handles cust ...)
TODO: check
CVE-2026-92861 (The Android application "Ticket Ryutsu Center" contains hard-coded cre ...)
TODO: check
CVE-2026-89322 (Vault and Vault Enterprise did not consistently evaluate ACL policies ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-87726 (Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC66 ...)
TODO: check
CVE-2026-87688 (An input validation vulnerability exists in the security certificate m ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87687 (An authorization and input validation vulnerability exists in Brocade ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87686 (An authentication and access control bypass vulnerability exists in th ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87685 (An arbitrary file manipulation vulnerability exists in the WebTools ma ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87684 (A stack-based buffer overflow vulnerability exists in the SNMP daemon ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87683 (Multiple stack-based buffer overflow vulnerabilities exist in the REST ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87682 (Multiple OS Command Injection vulnerabilities exist in the management ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87681 (An Access Control Bypass vulnerability exists in the Role-Based Access ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87680 (A command injection vulnerability in the REST API management interface ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87679 (When Brocade Fabric OS versions before 10.0.1 processes trunk configur ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87678 (An input validation and output encoding vulnerability exists in the we ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87677 (An OS command injection vulnerability exists in the account management ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87676 (A stack-based buffer overflow vulnerability exists in the security lib ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87675 (An OS command injection vulnerability exists in the configuration mana ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87674 (A local privilege escalation vulnerability exists in the system loggin ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87673 (An OS command injection vulnerability exists in maintenance command-li ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87672 (An information disclosure vulnerability exists in the SupportLink diag ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87671 (An out-of-bounds memory read vulnerability exists in the web managemen ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87670 (An authorization logic vulnerability exists in the Brocade Fabric OS v ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87669 (A missing authorization check in Brocade Fabric OS versions before 10. ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87668 (A stack-based buffer overflow vulnerability exists in the diagnostic e ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87667 (An argument injection vulnerability exists in the configuration manage ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87666 (An OS command injection vulnerability exists in the time and zone mana ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87665 (A stack-based buffer overflow vulnerability exists in the Internet Key ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87664 (A session context forgery vulnerability exists in the web management d ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87663 (An authentication bypass and command injection vulnerability exists in ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87662 (Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 hand ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87661 (Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 d ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87660 (An improper file permission and missing authorization vulnerability ex ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87659 (A critical authorization bypass vulnerability exists in the Management ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87428 (In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87426 (An unauthenticated network-based attacker can query specific internal ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87425 (An unauthenticated remote attacker can modify the TLS client trust sto ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-87424 (A vulnerability in the SupportLink API authentication component of Bro ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-86828 (The BackWPup WordPress plugin before 5.7.7 does not properly restrict ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86827 (The BackWPup WordPress plugin before 5.7.7 does not verify that a req ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86826 (The BackWPup WordPress plugin before 5.7.7 does not properly restrict ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85490 (When Brocade ASCG before 3.5.0 processes support bundle archives inges ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85489 (An authentication flaw exists in the Brocade ASCG administrative manag ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85488 (Brocade ASCG before 3.5.0 has a well-known Brocade default password em ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85487 (A path traversal vulnerability exists in the HTTP service component of ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85486 (Brocade ASCG before 3.5.0 improperly processes user input by evaluatin ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85423 (A vulnerability has been identified in the data collection service of ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85422 (A vulnerability in Brocade ASCG version before 3.5.0 could allow an at ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85421 (A critical security vulnerability has been identified in Brocade ASCG ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-85097 (The Bricksforge plugin for WordPress is vulnerable to unauthenticated ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82627 (The Uncanny Automator \u2013 AI + Automation for WordPress | AI Agent, ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-76286 (In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could sen ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76285 (Improper Adherence to Coding Standards. Splunk addressed multiple inte ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76284 (Improper Neutralization. Splunk addressed multiple internally identifi ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76283 (Protection Mechanism Failure. Splunk addressed multiple internally ide ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76282 (Improper Control of a Resource Through its Lifetime. Splunk addressed ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76281 (Improper Access Control. Splunk addressed multiple internally identifi ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76280 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76279 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76278 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a use ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76277 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76276 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76275 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76274 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a use ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76273 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76272 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76271 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76270 (In Splunk Enterprise versions below 10.4.3, a user that holds a role w ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76269 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76268 (In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthentica ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76267 (In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a use ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76266 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76265 (In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76264 (In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.1 ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-5769 (A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fa ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-5049 (A path traversal vulnerability affects the The Zone Alias Import flow ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-5048 (In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in var ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-5047 (A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encod ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2026-34499 (Use of hard-coded cryptographic key vulnerability in Johnson Controls ...)
- TODO: check
+ NOT-FOR-US: Johnson Controls
CVE-2026-17609 (The Super Forms \u2013 Drag & Drop Form Builder plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17538 (The LatePoint - Appointment Booking & Reservation plugin for WordPress ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-17196 (The Super Forms \u2013 Drag & Drop Form Builder plugin for WordPress i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107459 (The SecuShare Pro developed by Openfind has an OS Command Injection vu ...)
TODO: check
CVE-2026-107450 (In Stump through 0.1.10, the updateSmartList and deleteSmartList Graph ...)
@@ -231,7 +231,7 @@ CVE-2026-107354
CVE-2026-107353 (traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5. ...)
TODO: check
CVE-2026-107352 (Missing authorization checks in Amazon Athena engine version 3 request ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-107315 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pa ...)
TODO: check
CVE-2026-107314 (pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 e ...)
@@ -267,43 +267,43 @@ CVE-2026-107176 (A flaw was found in the cluster-samples-operator. The RBAC Role
CVE-2026-107161 (A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_ ...)
TODO: check
CVE-2026-105820 (Vault's ACL policy cache allowed namespace traversal when policy names ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-105818 (Vault's PKI secrets engine ACME server did not restrict certificate id ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-105816 (Vault and Vault Enterprise did not consistently verify that stored plu ...)
- TODO: check
+ NOT-FOR-US: Hashicorp products not packaged in Debian
CVE-2026-105260 (The Database Addon For WPForms ( wpforms entries ) WordPress plugin b ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105198 (The Appointment Booking Plugin WordPress plugin before 5.7.3 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105197 (The Appointment Booking Plugin WordPress plugin before 5.6.5 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105196 (The Appointment Booking Plugin WordPress plugin before 5.6.9 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105195 (The Booking Calendar WordPress plugin before 11.8.3 does not adequatel ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105194 (The Easy Digital Downloads WordPress plugin before 3.7.1 does not res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-105193 (The Booking Calendar WordPress plugin before 11.8 does not generate it ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104646 (The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.1 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104645 (The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.1 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103692 (The Frontend Dashboard WordPress plugin before 3.0.5 does not perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103646 (The Ultimate Multisite WordPress plugin before 2.17.0 does not requir ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103309 (The GPTranslate WordPress plugin before 2.34.14 does not properly res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102488 (In affected versions, Octopus Server incorrectly evaluates multiple sc ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2024-8122 (The WSO2 Identity Server fails to enforce a default expiry time for SM ...)
- TODO: check
+ NOT-FOR-US: WSO2
CVE-2023-5649 (An Improper Input Validation vulnerability for the registered case cre ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2023-5648 (In Brocade ASCG before Brocade ASCG v3.0, several security-related HTT ...)
- TODO: check
+ NOT-FOR-US: Brocade
CVE-2017-20283 (NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerabili ...)
TODO: check
CVE-2026-84790
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb522c0dbab38554fe3426dcd8605e771938e408
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb522c0dbab38554fe3426dcd8605e771938e408
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261008/083436e6/attachment.htm>
More information about the debian-security-tracker-commits
mailing list