[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
89edd8a9 by Salvatore Bonaccorso at 2026-10-09T21:22:33+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21,13 +21,13 @@ CVE-2026-96518 (Missing Authorization vulnerability in properfraction ProfilePre
 CVE-2026-96461 (Missing Authorization vulnerability in TMS Amelia ameliabooking allows ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-96396 (The Affinity by Canva application for macOS before 3.3.1 (October 2026 ...)
-	TODO: check
+	NOT-FOR-US: Affinity by Canva application for macOS
 CVE-2026-96395 (The Affinity by Canva app for macOS before 3.3.1 (October 2026 release ...)
-	TODO: check
+	NOT-FOR-US: Affinity by Canva application for macOS
 CVE-2026-96394 (The Affinity by Canva application for macOS before 3.3.1 (October 2026 ...)
-	TODO: check
+	NOT-FOR-US: Affinity by Canva application for macOS
 CVE-2026-96393 (The Affinity by Canva app before 3.3.1 (October 2026 release) did not  ...)
-	TODO: check
+	NOT-FOR-US: Affinity by Canva application
 CVE-2026-96337 (Missing Authorization vulnerability in properfraction ProfilePress wp- ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-96336 (Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator ...)
@@ -49,7 +49,7 @@ CVE-2026-96328 (Improper Neutralization of Special Elements used in an SQL Comma
 CVE-2026-96327 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95702 (Use-after-free vulnerability in VFS in Google gVisor prior to release  ...)
-	TODO: check
+	NOT-FOR-US: gVisor
 CVE-2026-95610 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-95609 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
@@ -129,11 +129,11 @@ CVE-2026-94058 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-93947 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-92085 (Improper neutralization of input during web page generation ('cross-si ...)
-	TODO: check
+	NOT-FOR-US: Talassoft Industrial Management Software
 CVE-2026-90983 (Use of Client-Side authentication vulnerability in Hayat Health Facili ...)
-	TODO: check
+	NOT-FOR-US: Hayat Mobile
 CVE-2026-8374 (Misuse and misconfiguration in Bluetooth communication in SwitchBot Do ...)
-	TODO: check
+	NOT-FOR-US: SwitchBot Door Lock Series
 CVE-2026-89235 (The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does no ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-87846 (The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not  ...)
@@ -143,11 +143,11 @@ CVE-2026-86851 (The Livees Checkout WordPress plugin through 7.0.2 does not perf
 CVE-2026-86463 (Apache CXF's FIQL query parser has a vulnerability in how it searches  ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-86405 (Improper verification of cryptographic signature vulnerability in Sipa ...)
-	TODO: check
+	NOT-FOR-US: PrestaShop Virtual POS Module
 CVE-2026-85531 (Improper verification of cryptographic signature vulnerability in Sipa ...)
-	TODO: check
+	NOT-FOR-US: OpenCart Virtual POS Module:
 CVE-2026-85479 (The STTP-based data publisher on openPDC accepts network connections w ...)
-	TODO: check
+	NOT-FOR-US: openPDC
 CVE-2026-85348 (The GDPR Data Request Form WordPress plugin through 1.7.1 does not hav ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84224 (The Kirki WordPress plugin before 6.3.2 does not validate the host of  ...)
@@ -157,13 +157,13 @@ CVE-2026-84220 (The Kirki WordPress plugin before 6.3.2 does not prevent shortco
 CVE-2026-79650 (Apache CXF\u2019s OIDC relying-party component could redirect users to ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-79363 (Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vul ...)
-	TODO: check
+	NOT-FOR-US: Cloudron
 CVE-2026-78835 (Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Ins ...)
-	TODO: check
+	NOT-FOR-US: Rocket Software Rocket Remote Desktop
 CVE-2026-78796 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wire ...)
-	TODO: check
+	NOT-FOR-US: Netcore
 CVE-2026-78795 (An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wire ...)
-	TODO: check
+	NOT-FOR-US: Netcore
 CVE-2026-78384 (CompressionUtils.inflate() decompressed attacker-controlled DEFLATE da ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-78341 (Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89edd8a95e97cb12d163e77d674a1e65ff9f63e9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89edd8a95e97cb12d163e77d674a1e65ff9f63e9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/0f2e2b62/attachment.htm>