[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 12 08:14:05 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
a6a2ddce by security tracker role at 2026-10-12T07:13:56+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,189 @@
+CVE-2026-98385 (In the Linux kernel, the following vulnerability has been resolved: s ...)
+ TODO: check
+CVE-2026-93582 (The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 ...)
+ TODO: check
+CVE-2026-93581 (User-controlled values are not sufficiently neutralized when included ...)
+ TODO: check
+CVE-2026-87765 (In the kernel apsys DVFS driver, there is a possible out-of-bounds rea ...)
+ TODO: check
+CVE-2026-87690 (The Metasploit Framework post module post/apple_ios/gather/ios_image_g ...)
+ TODO: check
+CVE-2026-84167 (The Hotel Booking WordPress plugin through 3.8 does not verify that a ...)
+ TODO: check
+CVE-2026-84166 (The Hotel Booking WordPress plugin through 3.8 does not implement CSRF ...)
+ TODO: check
+CVE-2026-78359 (OTRS does not sufficiently enforce the uniqueness of customer user ide ...)
+ TODO: check
+CVE-2026-78358 (Several administrative actions do not sufficiently validate whether a ...)
+ TODO: check
+CVE-2026-78357 (Previously issued authentication tokens are not immediately invalidate ...)
+ TODO: check
+CVE-2026-78356 (The OTRS Agent Frontend configuration endpoint can be accessed without ...)
+ TODO: check
+CVE-2026-78355 (A path traversal vulnerability in the OTRSSendSupportBundle functional ...)
+ TODO: check
+CVE-2026-66086 (In the modem OTA stack, there is a possible stack-based buffer overflo ...)
+ TODO: check
+CVE-2026-66085 (In modem, there is a possible information disclosure due to missing fi ...)
+ TODO: check
+CVE-2026-48212 (An OTRS administrator can enter arbitrary JavaScript into the content ...)
+ TODO: check
+CVE-2026-48211 (An authenticated administrator can be induced to delete administrative ...)
+ TODO: check
+CVE-2026-21139 (Improper access control in Samsung Continuity Service for windows prio ...)
+ TODO: check
+CVE-2026-21138 (Insufficient verification of data authenticity in Smart Switch prior t ...)
+ TODO: check
+CVE-2026-21137 (Path traversal in Smart Switch prior to version 3.7.73 allows physical ...)
+ TODO: check
+CVE-2026-21136 (Improper authorization in Smart Switch prior to version 3.7.73 allows ...)
+ TODO: check
+CVE-2026-21135 (Improper access control in Samsung Internet prior to version 30.0.5.6 ...)
+ TODO: check
+CVE-2026-21134 (Improper authentication in Samsung Flow prior to version 4.9.22.4 allo ...)
+ TODO: check
+CVE-2026-21133 (Path traversal in Samsung Flow prior to version 4.9.22.1 allows local ...)
+ TODO: check
+CVE-2026-21132 (Improper input validation in Samsung Internet prior to version 30.0.5. ...)
+ TODO: check
+CVE-2026-21131 (Incorrect default permission in Samsung Flow prior to version 4.9.22.4 ...)
+ TODO: check
+CVE-2026-21130 (Improper input validation in CreditCardRetrieveActivity of Samsung Che ...)
+ TODO: check
+CVE-2026-21129 (Improper input validation in GuestCreditCardRegisterActivity of Samsun ...)
+ TODO: check
+CVE-2026-21128 (Improper input validation in CreditCardRegisterActivity of Samsung Che ...)
+ TODO: check
+CVE-2026-21127 (Improper export of android application components in Samsung Account p ...)
+ TODO: check
+CVE-2026-21126 (Improper input validation in getting cover image in libsimba.heifdec.m ...)
+ TODO: check
+CVE-2026-21125 (Improper input validation in parsing sheifd in libsimba.heifdec.media. ...)
+ TODO: check
+CVE-2026-21124 (Improper input validation in getting cover image in libsimba.heifdec.m ...)
+ TODO: check
+CVE-2026-21123 (Improper privilege management in Locksettings prior to SMR Oct-2026 Re ...)
+ TODO: check
+CVE-2026-21122 (Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release ...)
+ TODO: check
+CVE-2026-21121 (Improper handling of insufficient permission in CmcCore prior to SMR O ...)
+ TODO: check
+CVE-2026-21120 (Use after free in WSM service prior to SMR Oct-2026 Release 1 allows l ...)
+ TODO: check
+CVE-2026-21119 (Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to ...)
+ TODO: check
+CVE-2026-21118 (Improper access control in DownloadProvider prior to SMR Oct-2026 Rele ...)
+ TODO: check
+CVE-2026-21117 (Improper access control in CocktailBarService prior to SMR Oct-2026 Re ...)
+ TODO: check
+CVE-2026-21116 (Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Relea ...)
+ TODO: check
+CVE-2026-21115 (Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 ...)
+ TODO: check
+CVE-2026-21114 (Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Relea ...)
+ TODO: check
+CVE-2026-109082 (A flaw was found in the Client-Initiated Backchannel Authentication CI ...)
+ TODO: check
+CVE-2026-109080 (SQL injection in the bulk license plate search of the Flock Night Shif ...)
+ TODO: check
+CVE-2026-108985 (ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ...)
+ TODO: check
+CVE-2026-108982 (VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended ...)
+ TODO: check
+CVE-2026-108981 (ngx_cache_purge before 3.0.4 can allow file deletion via a symlink att ...)
+ TODO: check
+CVE-2026-108980 (Blinko through 1.8.8 allows directory traversal, overwriting startup f ...)
+ TODO: check
+CVE-2026-108978 (Heap-based buffer overflow vulnerability in Samsung Opensource rlottie ...)
+ TODO: check
+CVE-2026-108976 (GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command inje ...)
+ TODO: check
+CVE-2026-108963 (databasement before 1.8.2 allows remote code execution because it runs ...)
+ TODO: check
+CVE-2026-108809 (A vulnerability was identified in Eleveo Call Recording Software up to ...)
+ TODO: check
+CVE-2026-108808 (A vulnerability was determined in Eleveo Call Recording Software up to ...)
+ TODO: check
+CVE-2026-108807 (A vulnerability was found in krupalshah EmployeeRecruitmentSystem up t ...)
+ TODO: check
+CVE-2026-108806 (A vulnerability has been found in krupalshah EmployeeRecruitmentSystem ...)
+ TODO: check
+CVE-2026-108805 (A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 92 ...)
+ TODO: check
+CVE-2026-108804 (A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW ...)
+ TODO: check
+CVE-2026-108803 (A security vulnerability has been detected in y_project RuoYi up to 4. ...)
+ TODO: check
+CVE-2026-108802 (A weakness has been identified in y_project RuoYi up to 4.8.3. This af ...)
+ TODO: check
+CVE-2026-108801 (A security flaw has been discovered in prasathmani TinyFileManager up ...)
+ TODO: check
+CVE-2026-108800 (A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affec ...)
+ TODO: check
+CVE-2026-108799 (A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7c ...)
+ TODO: check
+CVE-2026-108798 (A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. ...)
+ TODO: check
+CVE-2026-108797 (A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130. ...)
+ TODO: check
+CVE-2026-108796 (A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. Thi ...)
+ TODO: check
+CVE-2026-108795 (A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.32 ...)
+ TODO: check
+CVE-2026-108794 (A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Bui ...)
+ TODO: check
+CVE-2026-108791 (A weakness has been identified in westboy CicadasCMS up to 2431154dac8 ...)
+ TODO: check
+CVE-2026-108790 (A security flaw has been discovered in westboy CicadasCMS up to 243115 ...)
+ TODO: check
+CVE-2026-108789 (A vulnerability was identified in deepseek-ai deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-108788 (A vulnerability was determined in deepseek-ai deepseek-harness up to 0 ...)
+ TODO: check
+CVE-2026-108787 (A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1 ...)
+ TODO: check
+CVE-2026-108786 (A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1 ...)
+ TODO: check
+CVE-2026-108785 (A flaw has been found in macrozheng mall up to 1.0.3. This issue affec ...)
+ TODO: check
+CVE-2026-108784 (A vulnerability was detected in macrozheng mall up to 1.0.3. This vuln ...)
+ TODO: check
+CVE-2026-108783 (A security vulnerability has been detected in PRVTPRO Amnezia-Web-Pane ...)
+ TODO: check
+CVE-2026-108782 (A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W ...)
+ TODO: check
+CVE-2026-108781 (A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09 ...)
+ TODO: check
+CVE-2026-108779 (A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W ...)
+ TODO: check
+CVE-2026-108778 (A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W ...)
+ TODO: check
+CVE-2026-108777 (A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. T ...)
+ TODO: check
+CVE-2026-108775 (A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W ...)
+ TODO: check
+CVE-2026-108774 (A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The a ...)
+ TODO: check
+CVE-2026-108773 (A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39 ...)
+ TODO: check
+CVE-2026-108772 (A security vulnerability has been detected in bleenco abstruse up to 2 ...)
+ TODO: check
+CVE-2026-108770 (A weakness has been identified in Appwrite up to 2.3.0. This vulnerabi ...)
+ TODO: check
+CVE-2026-108769 (A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. ...)
+ TODO: check
+CVE-2026-107791 (The WP Comment Cleaner WordPress plugin before 7.2 does not perform a ...)
+ TODO: check
+CVE-2026-107437 (GV-E-Map Server V18.2.0A contains a plaintext database password embedd ...)
+ TODO: check
+CVE-2026-107203 (An **incorrect authorization** flaw has been found in **network interf ...)
+ TODO: check
+CVE-2026-107193 (A flaw has been found in **permission filters** in the **foreman** pac ...)
+ TODO: check
+CVE-2026-104703
+ REJECTED
+CVE-2025-15703 (The HireZoot WordPress plugin before 4.0.0 does not sanitise and esca ...)
+ TODO: check
CVE-2026-59508 (Improper neutralization of special elements used in an SQL command ('S ...)
NOT-FOR-US: Interuse i-Bos
CVE-2026-19935 (The Bluetooth LE host queues received L2CAP connection-oriented channe ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6a2ddcec2e53a8fc2202adfa93397fd3d169109
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a6a2ddcec2e53a8fc2202adfa93397fd3d169109
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/89458ab0/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list