[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e7530ec0 by Salvatore Bonaccorso at 2026-10-09T09:54:29+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-9209 (mJobTime through build 15.7.3.32 contains an unauthenticated SQL execu ...)
-	TODO: check
+	NOT-FOR-US: mJobTime
 CVE-2026-97076 (Executable Regular Expression Error vulnerability in WP Media WP Rocke ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-96207 (Improper certificate validation in Microsoft Partner Center allows an  ...)
@@ -22,27 +22,27 @@ CVE-2026-95116 (An issue in libming through 0.4.8 allows a remote attacker to ca
 CVE-2026-94510 (Authorization bypass through user-controlled key in Microsoft Bookings ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-93699 (Argument injection in WP Toolkit for cPanel allows local users to exec ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2026-93548 (The FooSales  WordPress plugin before 1.43.3 does not verify that an a ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93509 (The Wallet System for WooCommerce WordPress plugin before 2.8.0 does n ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93034 (SGLang contains an arbitrary code execution vulnerability caused by th ...)
-	TODO: check
+	NOT-FOR-US: SGLang
 CVE-2026-93017 (The `insights-operator-gather` ClusterRole grants the operator's servi ...)
-	TODO: check
+	NOT-FOR-US: Red Hat OpenShift
 CVE-2026-92990 (The SendPress Newsletters WordPress plugin through 1.26.1.20 protects  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92989 (The SendPress Newsletters WordPress plugin through 1.26.1.20 does not  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92555 (Insertion of sensitive information into sent data vulnerability in AKI ...)
-	TODO: check
+	NOT-FOR-US: AKINSOFT WOLVOX Control Panel
 CVE-2026-91844 (Unrestricted upload of file with dangerous type vulnerability in \u013 ...)
-	TODO: check
+	NOT-FOR-US: eimzamip
 CVE-2026-89290 (Improper neutralization of Script-Related HTML tags in a web page (bas ...)
-	TODO: check
+	NOT-FOR-US: eimzamip
 CVE-2026-89191 (Unsanitised input in the "template name" field of SQLView KRIS's Workf ...)
-	TODO: check
+	NOT-FOR-US: SQLView KRIS
 CVE-2026-89091 (A flaw was found in ansible-core. When installing a collection with `a ...)
 	TODO: check
 CVE-2026-88931 (The Social Web Suite  WordPress plugin through 4.1.12 does not restric ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7530ec0f81035274d41945cd6642f203fd730b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e7530ec0f81035274d41945cd6642f203fd730b6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/2c1d170d/attachment-0001.htm>