[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 9 20:15:19 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
cd62bfdf by security tracker role at 2026-10-09T19:15:13+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,25 +1,25 @@
CVE-2026-97791 (In Apache CXF, STSTokenValidator checks whether a SAML assertion is si ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-97468 (Apache CXF's STSTokenValidator and Security Token Service (STS) cached ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-97075 (Missing Authorization vulnerability in WP Media WP Rocket wp-rocket al ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96809 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96761 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96671 (Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured I ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96607 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96553 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96539 (Incorrect Privilege Assignment vulnerability in Ultimate Member Ultima ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96518 (Missing Authorization vulnerability in properfraction ProfilePress wp- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96461 (Missing Authorization vulnerability in TMS Amelia ameliabooking allows ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96396 (The Affinity by Canva application for macOS before 3.3.1 (October 2026 ...)
TODO: check
CVE-2026-96395 (The Affinity by Canva app for macOS before 3.3.1 (October 2026 release ...)
@@ -29,105 +29,105 @@ CVE-2026-96394 (The Affinity by Canva application for macOS before 3.3.1 (Octobe
CVE-2026-96393 (The Affinity by Canva app before 3.3.1 (October 2026 release) did not ...)
TODO: check
CVE-2026-96337 (Missing Authorization vulnerability in properfraction ProfilePress wp- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96336 (Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96334 (Missing Authorization vulnerability in ThemeGrill User Registration us ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96333 (Authentication Bypass by Spoofing vulnerability in Liquid Web / Stella ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96332 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96331 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96330 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96329 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96328 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to release ...)
TODO: check
CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95608 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95607 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95599 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95598 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95597 (Missing Authorization vulnerability in codemstory \uc6cc\ub4dc\ud504\u ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95596 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95591 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-95589 (Missing Authorization vulnerability in Magepeople inc. Deposits and Pa ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94668 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94667 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94666 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94665 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94664 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94663 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94661 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94641 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94632 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94568 (Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay w ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94503 (Unrestricted Upload of File with Dangerous Type vulnerability in PX-la ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94415 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94170 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94167 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94166 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94161 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94159 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94158 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94067 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94066 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94065 (Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorF ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94064 (Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94063 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94062 (Improper Control of Filename for Include/Require Statement in PHP Prog ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94061 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94060 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94059 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-94058 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-93947 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-92085 (Improper neutralization of input during web page generation ('cross-si ...)
TODO: check
CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat Health Facili ...)
@@ -135,13 +135,13 @@ CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat Health
CVE-2026-8374 (Misuse and misconfiguration in Bluetooth communication in SwitchBot Do ...)
TODO: check
CVE-2026-89235 (The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does no ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-87846 (The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86851 (The Livees Checkout WordPress plugin through 7.0.2 does not perform an ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86463 (Apache CXF's FIQL query parser has a vulnerability in how it searches ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-86405 (Improper verification of cryptographic signature vulnerability in Sipa ...)
TODO: check
CVE-2026-85531 (Improper verification of cryptographic signature vulnerability in Sipa ...)
@@ -149,13 +149,13 @@ CVE-2026-85531 (Improper verification of cryptographic signature vulnerability i
CVE-2026-85479 (The STTP-based data publisher on openPDC accepts network connections w ...)
TODO: check
CVE-2026-85348 (The GDPR Data Request Form WordPress plugin through 1.7.1 does not hav ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84224 (The Kirki WordPress plugin before 6.3.2 does not validate the host of ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84220 (The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes he ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-79650 (Apache CXF\u2019s OIDC relying-party component could redirect users to ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-79363 (Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vul ...)
TODO: check
CVE-2026-78835 (Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Ins ...)
@@ -165,45 +165,45 @@ CVE-2026-78796 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port sho
CVE-2026-78795 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wire ...)
TODO: check
CVE-2026-78384 (CompressionUtils.inflate() decompressed attacker-controlled DEFLATE da ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78340 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78339 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78027 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78026 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78025 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78024 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78023 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78022 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78021 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78020 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78019 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78018 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78017 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78016 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78015 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-78013 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-76779 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-76769 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-75597 (pyLoad is a free and open-source download manager written in Python. P ...)
TODO: check
CVE-2026-75353 (OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the ser ...)
@@ -225,39 +225,39 @@ CVE-2026-75346 (An out-of-bounds read vulnerability exists in EIPStackGroup OpEN
CVE-2026-75345 (OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the u ...)
TODO: check
CVE-2026-73179 (Improper enforcement of single-use authorization code semantics in the ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-71884 (In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR ...)
- TODO: check
+ NOT-FOR-US: Bouncycastle components not packaged in Debian
CVE-2026-71575 (The max_age authentication-freshness check in OidcClientCodeRequestFil ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-62049 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62042 (Missing Authorization vulnerability in unFocus Projects Scripts n Styl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62041 (Missing Authorization vulnerability in Ashok Dudhat WP Event Manager w ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62040 (Missing Authorization vulnerability in DEV Institute Restrict User Acc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62039 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62036 (Exposure of Sensitive System Information to an Unauthorized Control Sp ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62029 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62028 (Missing Authorization vulnerability in bPlugins Before After Image Com ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-62026 (Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashbo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-55797 (Argo CD is a declarative, GitOps continuous delivery tool for Kubernet ...)
- TODO: check
+ NOT-FOR-US: Argo CD
CVE-2026-4264 (Reflected Cross-Site Scripting (XSS) on the BeeTienda e-commerce platf ...)
TODO: check
CVE-2026-48484 (pyLoad is a free and open-source download manager written in Python. P ...)
TODO: check
CVE-2026-42695 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-39779 (Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-f ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-39460 (Usernames and passwords, including the default factory credentials, ar ...)
TODO: check
CVE-2026-39453 (Navigating to a certain URL on the switch\u2019s web server causes the ...)
@@ -273,15 +273,15 @@ CVE-2026-29797 (No authentication is required when updating firmware or bootload
CVE-2026-28745 (Usernames and passwords, including the default credentials, are stored ...)
TODO: check
CVE-2026-19575 (The user-mode verification handler for the device_deinit() system call ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19574 (The ARM64 MMU back-end allocated address space identifiers (ASIDs) for ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19571 (The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/back ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19570 (The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_si ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-19569 (dynamic_object_create() in kernel/userspace/userspace.c computed the b ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-15340 (lwIP SMTP client does not check the size of inputs, potentially allowi ...)
TODO: check
CVE-2026-108160 (AstronRPA through 1.1.6 contains a download of code without integrity ...)
@@ -311,7 +311,7 @@ CVE-2026-108110 (MOVO through 0.2.3 contains an authorization bypass vulnerabili
CVE-2026-108109 (PHPNuxBill through 2025.3.20 contains an account takeover vulnerabilit ...)
TODO: check
CVE-2026-108108 (PHPNuxBill through 2025.3.20 contains an authentication bypass vulnera ...)
- TODO: check
+ NOT-FOR-US: MikroTik
CVE-2026-108107 (PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection ...)
TODO: check
CVE-2026-108106 (Xerial snappy-java before 1.1.10.9 contains an unbounded memory alloca ...)
@@ -329,17 +329,17 @@ CVE-2026-108101 (HortusFox (hortusfox-web) through 6.3 contains an unrestricted
CVE-2026-108100 (HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnera ...)
TODO: check
CVE-2026-108096 (Improper authorization in the query resolvers generated by @aws-amplif ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-108093 (A flaw was found in GIMP. The XCF loader processes image-simulation-in ...)
TODO: check
CVE-2026-108063 (A flaw was found in libhangul. When parsing Hanja dictionary files, th ...)
TODO: check
CVE-2026-108039 (By default, StaxUtils placed no limit on the total number of elements ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107938 (In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transport ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107937 (In Apache CXF, the parser for multipart/MTOM attachment part headers d ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-107935 (A path traversal vulnerability was found in gvproxy, the network forwa ...)
TODO: check
CVE-2026-107841 (pacioli provides least-privilege governance and a governed agent broke ...)
@@ -411,31 +411,31 @@ CVE-2026-107803 (ProcessMaker is an open source workflow management software sui
CVE-2026-107785 (Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as ...)
TODO: check
CVE-2026-107783 (Insertion of sensitive information into log file in AWS Tools for Powe ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-107655 (A flaw was found in CUPS. When processing embedded job ticket comments ...)
TODO: check
CVE-2026-107419 (Missing Authorization vulnerability in Cool Plugins AI Translation for ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106602 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106601 (Authentication Bypass Using an Alternate Path or Channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106581 (Before 4.92.0, Docker Desktop for Windows did not verify the signature ...)
- TODO: check
+ NOT-FOR-US: Docker products not packaged in Debian
CVE-2026-106155 (In Progress\xae Telerik\xae Report Server prior to version 12.2.26.100 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-106145 (In Progress\xae Telerik\xae Report Server prior to version 12.2.26.100 ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-105883 (Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105877 (Insertion of Sensitive Information Into Sent Data vulnerability in Qua ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105872 (Deserialization of Untrusted Data vulnerability in mklacroix Product C ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105870 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105318 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105281 (The internal data publisher on openPDC accepts network connections wit ...)
TODO: check
CVE-2026-105278 (The published Docker image for openPDC includes a fixed administrative ...)
@@ -445,7 +445,7 @@ CVE-2026-104635 (Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in
CVE-2026-104629 (A component loading mechanism in openPDC and openHistorian will constr ...)
TODO: check
CVE-2026-104392 (Deserialization of Untrusted Data vulnerability in ExpressTech Quiz An ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-104117 (A missing authorization check in the illumos IP management daemon (ipm ...)
TODO: check
CVE-2026-104116 (A missing authorization check in the illumos zones statistics daemon ( ...)
@@ -469,11 +469,11 @@ CVE-2026-104081 (KodExplorer before 4.55 contains a path traversal vulnerability
CVE-2026-104079 (Envira Gallery Lite before 1.16.2 contains a missing authorization vul ...)
TODO: check
CVE-2026-103413 (Improper input validation vulnerability in Apache Camel Karavan. Wh ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-103412 (Improper limitation of a pathname to a restricted directory ('path tra ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-103329 (The Super Payments WordPress plugin before 1.43.1 does not properly ve ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103220 (The Affinity by Canva application before 3.3.1 (October 2026 release) ...)
TODO: check
CVE-2026-102916 (A reachable assertion in the illumos bhyve instruction emulator allows ...)
@@ -489,11 +489,11 @@ CVE-2026-101022 (A Modbus connection feature on openPDC accepts a caller-specifi
CVE-2026-100730 (A service console interface on openPDC and openHistorian deserializes ...)
TODO: check
CVE-2026-100227 (Improper Verification of Cryptographic Signature vulnerability in Apac ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2025-61560 (A race condition vulnerability in the SessionManager of CNCF: Cloud Na ...)
- TODO: check
+ NOT-FOR-US: Argo CD
CVE-2025-14123 (The Redux Framework plugin for WordPress is vulnerable to privilege es ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2016-20098 (Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a ...)
TODO: check
CVE-2026-98384 (In the Linux kernel, the following vulnerability has been resolved: b ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd62bfdff33f0397d8294f749232922c7b4d0c20
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd62bfdff33f0397d8294f749232922c7b4d0c20
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/2d491019/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list