[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Oct 12 08:15:02 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
2552994b by security tracker role at 2026-10-12T07:14:55+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5,13 +5,13 @@ CVE-2026-93582 (The HTTP Basic Authentication modules in ((OTRS)) Community Edit
CVE-2026-93581 (User-controlled values are not sufficiently neutralized when included ...)
TODO: check
CVE-2026-87765 (In the kernel apsys DVFS driver, there is a possible out-of-bounds rea ...)
- TODO: check
+ NOT-FOR-US: Unisoc
CVE-2026-87690 (The Metasploit Framework post module post/apple_ios/gather/ios_image_g ...)
TODO: check
CVE-2026-84167 (The Hotel Booking WordPress plugin through 3.8 does not verify that a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84166 (The Hotel Booking WordPress plugin through 3.8 does not implement CSRF ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-78359 (OTRS does not sufficiently enforce the uniqueness of customer user ide ...)
TODO: check
CVE-2026-78358 (Several administrative actions do not sufficiently validate whether a ...)
@@ -23,65 +23,65 @@ CVE-2026-78356 (The OTRS Agent Frontend configuration endpoint can be accessed w
CVE-2026-78355 (A path traversal vulnerability in the OTRSSendSupportBundle functional ...)
TODO: check
CVE-2026-66086 (In the modem OTA stack, there is a possible stack-based buffer overflo ...)
- TODO: check
+ NOT-FOR-US: Unisoc
CVE-2026-66085 (In modem, there is a possible information disclosure due to missing fi ...)
- TODO: check
+ NOT-FOR-US: Unisoc
CVE-2026-48212 (An OTRS administrator can enter arbitrary JavaScript into the content ...)
TODO: check
CVE-2026-48211 (An authenticated administrator can be induced to delete administrative ...)
TODO: check
CVE-2026-21139 (Improper access control in Samsung Continuity Service for windows prio ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21138 (Insufficient verification of data authenticity in Smart Switch prior t ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21137 (Path traversal in Smart Switch prior to version 3.7.73 allows physical ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21136 (Improper authorization in Smart Switch prior to version 3.7.73 allows ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21135 (Improper access control in Samsung Internet prior to version 30.0.5.6 ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21134 (Improper authentication in Samsung Flow prior to version 4.9.22.4 allo ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21133 (Path traversal in Samsung Flow prior to version 4.9.22.1 allows local ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21132 (Improper input validation in Samsung Internet prior to version 30.0.5. ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21131 (Incorrect default permission in Samsung Flow prior to version 4.9.22.4 ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21130 (Improper input validation in CreditCardRetrieveActivity of Samsung Che ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21129 (Improper input validation in GuestCreditCardRegisterActivity of Samsun ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21128 (Improper input validation in CreditCardRegisterActivity of Samsung Che ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21127 (Improper export of android application components in Samsung Account p ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21126 (Improper input validation in getting cover image in libsimba.heifdec.m ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21125 (Improper input validation in parsing sheifd in libsimba.heifdec.media. ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21124 (Improper input validation in getting cover image in libsimba.heifdec.m ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21123 (Improper privilege management in Locksettings prior to SMR Oct-2026 Re ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21122 (Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21121 (Improper handling of insufficient permission in CmcCore prior to SMR O ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21120 (Use after free in WSM service prior to SMR Oct-2026 Release 1 allows l ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21119 (Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21118 (Improper access control in DownloadProvider prior to SMR Oct-2026 Rele ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21117 (Improper access control in CocktailBarService prior to SMR Oct-2026 Re ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21116 (Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Relea ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21115 (Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-21114 (Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Relea ...)
- TODO: check
+ NOT-FOR-US: Samsung Mobile
CVE-2026-109082 (A flaw was found in the Client-Initiated Backchannel Authentication CI ...)
TODO: check
CVE-2026-109080 (SQL injection in the bulk license plate search of the Flock Night Shif ...)
@@ -111,7 +111,7 @@ CVE-2026-108806 (A vulnerability has been found in krupalshah EmployeeRecruitmen
CVE-2026-108805 (A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 92 ...)
TODO: check
CVE-2026-108804 (A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-108803 (A security vulnerability has been detected in y_project RuoYi up to 4. ...)
TODO: check
CVE-2026-108802 (A weakness has been identified in y_project RuoYi up to 4.8.3. This af ...)
@@ -173,9 +173,9 @@ CVE-2026-108770 (A weakness has been identified in Appwrite up to 2.3.0. This vu
CVE-2026-108769 (A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. ...)
TODO: check
CVE-2026-107791 (The WP Comment Cleaner WordPress plugin before 7.2 does not perform a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107437 (GV-E-Map Server V18.2.0A contains a plaintext database password embedd ...)
- TODO: check
+ NOT-FOR-US: GeoVision
CVE-2026-107203 (An **incorrect authorization** flaw has been found in **network interf ...)
TODO: check
CVE-2026-107193 (A flaw has been found in **permission filters** in the **foreman** pac ...)
@@ -183,7 +183,7 @@ CVE-2026-107193 (A flaw has been found in **permission filters** in the **forema
CVE-2026-104703
REJECTED
CVE-2025-15703 (The HireZoot WordPress plugin before 4.0.0 does not sanitise and esca ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-59508 (Improper neutralization of special elements used in an SQL command ('S ...)
NOT-FOR-US: Interuse i-Bos
CVE-2026-19935 (The Bluetooth LE host queues received L2CAP connection-oriented channe ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2552994be2f006edba200d9f19e71ebf9bdc1502
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2552994be2f006edba200d9f19e71ebf9bdc1502
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261012/f4238ab1/attachment.htm>
More information about the debian-security-tracker-commits
mailing list