[Git][security-tracker-team/security-tracker][master] Proces more NFUs

Fri Oct 9 09:12:07 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5056374 by Salvatore Bonaccorso at 2026-10-09T10:11:42+02:00
Proces more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -55,7 +55,7 @@ CVE-2026-88648 (Incomplete X.509 implementation in GnuTLS v3.8.13 allows attacke
 CVE-2026-88647 (A hostname verification bypass in GnuTLS v3.8.13 allows attackers to c ...)
 	TODO: check
 CVE-2026-88257 (Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKit ...)
-	TODO: check
+	NOT-FOR-US: BeamMCP.Schema
 CVE-2026-88131 (Deserialization of untrusted data in Microsoft Dataverse allows an una ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-87980 (IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local  ...)
@@ -63,11 +63,11 @@ CVE-2026-87980 (IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a
 CVE-2026-87841 (The UnitechPay  WordPress plugin through 1.0.6.3 does not verify the a ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-87110 (An unauthenticated user with network access to the Ops Manager web por ...)
-	TODO: check
+	NOT-FOR-US: MongoDB Ops Manager
 CVE-2026-87109 (An authenticated Ops Manager organization member can retrieve another  ...)
-	TODO: check
+	NOT-FOR-US: MongoDB Ops Manager
 CVE-2026-87108 (An authenticated Ops Manager user with a read-only project role can re ...)
-	TODO: check
+	NOT-FOR-US: MongoDB Ops Manager
 CVE-2026-86850 (The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84891 (IBM Guardium Data Protection 12.0, 12.1, and 12.2could allow a remote  ...)
@@ -135,9 +135,9 @@ CVE-2026-81929 (The Ocean Pro Demos and Ocean eComm Treasure Box plugins for Wor
 CVE-2026-80381 (IBM Guardium Data Protection 12.0, 12.1, and 12.2could allow a remote  ...)
 	NOT-FOR-US: IBM
 CVE-2026-7827 (A stack-based buffer overflow in the _RdbLoadEntity function of the RD ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-7826 (A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-79842 (An authentication bypass vulnerability exists in HPE Intelligent Manag ...)
 	NOT-FOR-US: HPE
 CVE-2026-78407 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
@@ -193,13 +193,13 @@ CVE-2026-62127 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-61801 (The `github.com/moby/sys/user` package provides Go utilities for parsi ...)
 	TODO: check
 CVE-2026-5759 (A double free and use-after-free vulnerability in the RdbLoadDeletedNo ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-50055 (A policy-enforcement flaw in Zimbra Collaboration Suite allows an auth ...)
 	NOT-FOR-US: Zimbra
 CVE-2026-50054 (An authorization flaw in Zimbra Collaboration Suite\u2019s GrantRights ...)
 	NOT-FOR-US: Zimbra
 CVE-2026-4894 (A vulnerability has been identified regarding insufficient validation  ...)
-	TODO: check
+	NOT-FOR-US: Frappe
 CVE-2026-44038 (A global out-of-bounds read in the Huffman decoder of the bundled IJG  ...)
 	- dcmtk <unfixed>
 	NOTE: https://support.dcmtk.org/redmine/issues/1221
@@ -383,31 +383,31 @@ CVE-2026-107886 (OpenPrinting CUPS before 2.4.20 contains a double-free in print
 CVE-2026-107885 (OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulner ...)
 	TODO: check
 CVE-2026-107831 (Jivejdon through 5.0 contains a cross-site request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107830 (Jivejdon from commit e0306088 through commit ee67a65e lacks rate limit ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107829 (Jivejdon through 5.0 contains a weak password storage vulnerability th ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107828 (Jivejdon through 5.0 contains an authentication bypass vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107802 (SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ...)
 	NOT-FOR-US: SumatraPDF
 CVE-2026-107801 (Jivejdon through 5.0 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107800 (Jivejdon through 5.0 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107799 (Jivejdon through 5.0 contains a stored cross-site scripting vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107798 (jivejdon from commit 595d8d22 through commit ee67a65e contains a store ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107797 (Jivejdon through 5.0 contains a reflected cross-site scripting vulnera ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107796 (Jivejdon from commit 5489372d through commit ee67a65e contains a refle ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107793 (Jivejdon through 5.0 contains an authorization bypass vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107792 (Jivejdon from commit d58a36b0 through commit ee67a65e contains a missi ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2026-107782 (System Informer before 4.0.26241.138 contains an incorrect authorizati ...)
 	TODO: check
 CVE-2026-107781 (Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 ...)
@@ -891,7 +891,7 @@ CVE-2026-101024 (Satel Netco Design versions prior to v2.1.7 contains a relative
 CVE-2026-100197
 	REJECTED
 CVE-2025-71428 (Jivejdon through 5.0 contains a sql injection vulnerability in Account ...)
-	TODO: check
+	NOT-FOR-US: Jivejdon
 CVE-2025-15700 (The AWP Classifieds WordPress plugin before 4.4.9 does not validate th ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-97147 (In OpenStack Mistral through 23.0.0, several of the v2 API write paths ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c50563744fa2d6c12d2d39d71687e3a0d4c470b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c50563744fa2d6c12d2d39d71687e3a0d4c470b6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/9ad92ae8/attachment-0001.htm>
