[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e0016974 by Salvatore Bonaccorso at 2026-10-09T10:29:47+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -254,9 +254,9 @@ CVE-2026-19491 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify
 CVE-2026-19482 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
 	NOT-FOR-US: IBM
 CVE-2026-19218 (Weak Password Recovery Mechanism for Forgotten Password vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: MyRezzta
 CVE-2026-19083 (Authorization bypass through User-Controlled key vulnerability in AKIN ...)
-	TODO: check
+	NOT-FOR-US: OctoCloud
 CVE-2026-18740 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
 	NOT-FOR-US: IBM
 CVE-2026-17189 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
@@ -348,9 +348,9 @@ CVE-2026-13258 (IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through
 CVE-2026-13257 (IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6. ...)
 	NOT-FOR-US: IBM
 CVE-2026-12859 (Missing Authorization vulnerability in Caz Informatics Services Trade  ...)
-	TODO: check
+	NOT-FOR-US: Advancity ALMS Cloud
 CVE-2026-12260 (SQL injection in the NetBoard CRM demo platform; specifically, the vul ...)
-	TODO: check
+	NOT-FOR-US: NetBoard CRM
 CVE-2026-12109 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
 	NOT-FOR-US: IBM
 CVE-2026-12091 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
@@ -364,19 +364,19 @@ CVE-2026-11930 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify
 CVE-2026-11888 (IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identi ...)
 	NOT-FOR-US: IBM
 CVE-2026-11318 (Deskin through 3.3.4.3 contains a privilege escalation vulnerability i ...)
-	TODO: check
+	NOT-FOR-US: Deskin
 CVE-2026-10631 (An authorization bypass in the EWS FindItem handler of Zimbra Collabor ...)
 	NOT-FOR-US: Zimbra
 CVE-2026-107914 (Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't suffici ...)
 	TODO: check
 CVE-2026-107911 (A type confusion vulnerability in the _read_flags function (src/comman ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-107910 (An improper authentication vulnerability in the is_authenticated funct ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-107909 (A heap-based out-of-bounds write in the ws_read_frame function (src/bo ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-107908 (A heap-based out-of-bounds write in the BoltReadHandler function (src/ ...)
-	TODO: check
+	NOT-FOR-US: FalkorDB
 CVE-2026-107889 (A flaw was found in the login theme rendering component of Keycloak. T ...)
 	TODO: check
 CVE-2026-107885 (OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulner ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e00169749d6eb3f02c3c20c475819f6286837186

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e00169749d6eb3f02c3c20c475819f6286837186
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/8090bf7d/attachment.htm>