[Git][security-tracker-team/security-tracker][master] Manually trigger the auto-NFU processing
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 14 21:06:55 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ec7de732 by Salvatore Bonaccorso at 2026-10-14T22:06:07+02:00
Manually trigger the auto-NFU processing
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,29 +1,29 @@
CVE-2026-97629 (Description When NGINX Plus or NGINX Open Source is configured withssl ...)
TODO: check
CVE-2026-97315 (The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97278 (Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-97205 (NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ ...)
TODO: check
CVE-2026-96615 (Description NGINX Gateway Fabric has a vulnerability when it is config ...)
- TODO: check
+ NOT-FOR-US: F5
CVE-2026-96596 (Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability i ...)
TODO: check
CVE-2026-95101 (Description NGINX Plus and NGINX Open Source have a vulnerability in t ...)
TODO: check
CVE-2026-94348 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an I ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-94200 (Improper Validation of Consistency within Input vulnerability in Erlan ...)
TODO: check
CVE-2026-94197 (An authentication and authorization bypass vulnerability exists in F5 ...)
- TODO: check
+ NOT-FOR-US: F5
CVE-2026-93683 (A flaw was found in the DPDK vhost library. When handling a virtio ind ...)
TODO: check
CVE-2026-93637 (An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1 ...)
- TODO: check
+ NOT-FOR-US: Zimbra
CVE-2026-93635 (LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10. ...)
- TODO: check
+ NOT-FOR-US: Zimbra
CVE-2026-93479 (A vulnerability exists in NGINX Plus and NGINX Open Source when a map ...)
TODO: check
CVE-2026-92160 (F\xb4 (F Prime) is a framework that enables development and deployment ...)
@@ -49,53 +49,53 @@ CVE-2026-92151 (F\xb4 (F Prime) is a framework that enables development and depl
CVE-2026-92150 (F\xb4 (F Prime) is a framework that enables development and deployment ...)
TODO: check
CVE-2026-91883 (Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91882 (Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91881 (Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-91184 (Description NGINX Gateway Fabrichas a vulnerability when it renders t ...)
- TODO: check
+ NOT-FOR-US: F5
CVE-2026-91159 (Discourse is an open-source discussion platform. Prior to 2026.9.0, 20 ...)
- TODO: check
+ NOT-FOR-US: Discourse
CVE-2026-91157 (Discourse is an open-source discussion platform. Prior to 2026.9.0, 20 ...)
- TODO: check
+ NOT-FOR-US: Discourse
CVE-2026-91156 (Discourse is an open-source discussion platform. Prior to 2026.9.0, 20 ...)
- TODO: check
+ NOT-FOR-US: Discourse
CVE-2026-90954 (A flaw was found in BusyBox's dpkg-deb archive extraction. The ar arch ...)
TODO: check
CVE-2026-89077 (Incorrect implementation of authentication algorithm vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89076 (Improper neutralization of special elements used in an SQL command ('S ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89075 (Insecure Storage of Sensitive Information vulnerability in Progress MO ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89074 (Improper handling of unicode encoding vulnerability in Progress MOVEit ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89073 (Insufficient Session Expiration vulnerability in Progress MOVEit Trans ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89072 (Incorrect Authorization vulnerability in Progress MOVEit Transfer (Cli ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89071 (Improper neutralization of special elements used in an LDAP query ('LD ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89070 (Authentication bypass by capture-replay vulnerability in Progress MOVE ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89069 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89068 (Missing critical step in authentication vulnerability in Progress MOVE ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-89067 (Authentication bypass using an alternate path or channel vulnerability ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-88998 (The Tickera WordPress plugin before 3.6.0.4 does not correctly verify ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-88842 (A flaw was found in BusyBox dpkg. The write_status_file() function doe ...)
TODO: check
CVE-2026-88829 (A flaw was found in BusyBox httpd's reverse proxy feature. When the pr ...)
TODO: check
CVE-2026-88164 (Missing authorization in Microsoft Office SharePoint allows an authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-87093 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-86856 (A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers s ...)
TODO: check
CVE-2026-86849 (A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in c ...)
@@ -123,7 +123,7 @@ CVE-2026-86561 (A flaw was found in DPDK lib/vhost. Memory size is not adequatel
CVE-2026-86476 (A flaw was found in gst-plugins-base. A heap buffer overflow can be tr ...)
TODO: check
CVE-2026-86461 (The FV Flowplayer Video Player plugin for WordPress is vulnerable to L ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86002 (Dokku is a docker-powered platform as a service. In Dokku versions bef ...)
TODO: check
CVE-2026-85714 (Stirling-PDF is a locally hosted web application that facilitates vari ...)
@@ -131,19 +131,19 @@ CVE-2026-85714 (Stirling-PDF is a locally hosted web application that facilitate
CVE-2026-85298 (An Incorrect Authorization vulnerability in the AuthConfig validation ...)
TODO: check
CVE-2026-82844 (The WPForms Lite WordPress plugin before 2.0.2.2 does not verify serve ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82402 (Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, a ...)
TODO: check
CVE-2026-82153 (Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure S ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-82026 (Radar before 1.12.2 contains a missing authorization vulnerability in ...)
TODO: check
CVE-2026-79957 (ServiceNext contains an insecure direct object reference (IDOR) in the ...)
TODO: check
CVE-2026-78433 (Gitea's web attachment handler skips its cross-repository ownership ch ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-78231 (When OpenID sign-in is enabled, Gitea processes unauthenticated assert ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-77572 (VeraCrypt provides disk encryption with strong security based on TrueC ...)
TODO: check
CVE-2026-77564 (Talos Linux is a Linux distribution built for Kubernetes deployments. ...)
@@ -153,77 +153,77 @@ CVE-2026-77524 (KEDA is a Kubernetes-based Event Driven Autoscaling component. I
CVE-2026-77371 (Redash is a package for data visualization and sharing. From 26.0.0 un ...)
TODO: check
CVE-2026-76655 (A security vulnerability inHPE NonStop SNMP Trap Multiplexer may allow ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-76519 (A vulnerability in the Advanced Malware Protection (AMP) feature of Ci ...)
- TODO: check
+ NOT-FOR-US: Cisco
CVE-2026-76113 (Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, con ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-76083 (Redash is a package for data visualization and sharing. From 10.0.0 un ...)
TODO: check
CVE-2026-75085 (The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-75084 (The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length fr ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-75083 (The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-73814 (Gitea's collaboration access-mode endpoint accepts the Owner access mo ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73804 (Gitea allows a token with write:user scope to register an attacker-con ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73802 (Gitea Runner passes workflow-controlled container options into Docker ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73800 (Gitea resolves local reusable workflow files from a fork's head commit ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73798 (A security vulnerability inHPE NonStop DNS 9.2.3 Non Secure Version co ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73797 (A security vulnerability inHPE NonStop TSQLFIL may cause address space ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73796 (A security vulnerability inHPE NonStop TSQLEXE may cause application c ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73795 (A security vulnerability in HPE NonStop TMF Auditread2 can cause Denia ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73794 (HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in R ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73793 (HPE NonStop Middleware software has secret key handling and data deser ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73792 (A security vulnerability in HPE NonStop Java JToolkit can allow comman ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73791 (A security vulnerability inHPE NonStop Hpjmeter can cause stack and he ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73790 (A vulnerability in HPE NonStop iTP WebServer can cause memory corrupti ...)
- TODO: check
+ NOT-FOR-US: HPE
CVE-2026-73539 (Gitea substitutes a URL derived from the markup Context field into ext ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73535 (Gitea's OpenID connect handler accepts a user's password without enfor ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73273 (Gitea's Maven upload handler reads checksum uploads entirely into memo ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73135 (Gitea uses inconsistent repository visibility predicates, and the cond ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73130 (Gitea does not limit the length of the gitignores field accepted by re ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-73126 (Gitea's Actions workflow status badge endpoint does not enforce reposi ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-71301 (Gitea's repository markup endpoint resolves same-repository pull reque ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-71184 (Gitea's pull request review notifier does not attach the pull request ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-70407 (Gitea's organization-list API does not enforce the read:organization t ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-70406 (Gitea's shared comparison helper omits the token repository-access che ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-70402 (Gitea creates server-side Git hook directories and scripts with mode 0 ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-70400 (Gitea's repository migration API accepts a public-only token when the ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-70396 (Gitea's organization repository-creation API requires write:organizati ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-68964 (Gitea's user SSH and GPG key-list API endpoints omit the profile visib ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-68957 (Gitea's API and web issue-search paths do not treat restricted account ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-67577 (Gitea's activity-feed and contribution-heatmap API handlers do not app ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-67418 (RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.1 ...)
TODO: check
CVE-2026-67416 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, ...)
@@ -231,35 +231,35 @@ CVE-2026-67416 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4
CVE-2026-67414 (RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, ...)
TODO: check
CVE-2026-66877 (Gitea enforces first-time fork contributor approval by blocking jobs, ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-66874 (For pull request events, Gitea reads workflow definitions from the pul ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-66853 (Gitea's user organization-list API includes Limited-visibility organiz ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-66849 (Gitea's package registry grants authenticated users read access to pac ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-63792 (Gitea's collaborative-owner authorization path for reading cross-repos ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-63021 (Gitea's Swift package parser limits each manifest to 128 KiB but does ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-62925 (Gitea parses Alpine package uploads before enforcing package-size quot ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-62858 (YOURLS is a self-hosted, customizable URL shortener written in PHP. Pr ...)
TODO: check
CVE-2026-60021 (Gitea's initial GitLab migration version probe uses an HTTP client wit ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-60018 (Gitea's OneDev migration downloader reads the entire remote version re ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-60010 (Gitea's repository-side team-link API allows a repository administrato ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-60008 (Gitea's Jupyter notebook renderer inserts the notebook's language_info ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-59951 (The MCP Python SDK, called mcp on PyPI, is a Python implementation of ...)
TODO: check
CVE-2026-59774 (Gitea's Org-mode markup renderer processes INCLUDE directives supplied ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-59766 (Gitea's starred-repository and tracked-time API endpoints do not re-ch ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-55787 (Flyto2 Core is an execution kernel for automation and AI-agent workflo ...)
TODO: check
CVE-2026-55786 (Flyto2 Core is an execution kernel for automation and AI-agent workflo ...)
@@ -281,21 +281,21 @@ CVE-2026-49206 (rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColum
CVE-2026-42093 (Redash is a package for data visualization and sharing. From versions ...)
TODO: check
CVE-2026-35161 (Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an O ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-33798 (A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper N ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-33796 (A Stack-based Buffer Overflow vulnerability in the routing protocol da ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-33795 (A Numeric Truncation Error vulnerability in the rpd process of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-33792 (A Stack-based Buffer Overflow vulnerability in the srxpfe process of J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-33789 (A Stack-based Buffer Overflow vulnerability in the routing protocol da ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-25946 (When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID U ...)
- TODO: check
+ NOT-FOR-US: Gitea (used to be packaged in the Debian archive as src:gitea, but never in a stable release)
CVE-2026-19673 (ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only th ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-16741 (Improper neutralization of special elements used in an OS command ('OS ...)
TODO: check
CVE-2026-16740 (Missing authentication for critical function vulnerability in TR7 Cybe ...)
@@ -303,7 +303,7 @@ CVE-2026-16740 (Missing authentication for critical function vulnerability in TR
CVE-2026-15176 (A vulnerability exists in NGINX Plus and NGINX Open Source when a loca ...)
TODO: check
CVE-2026-15102 (ADP Desktop SDK contains a vulnerability where sensitive information i ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-14851 (A vulnerability relating to the exposure of confidential information i ...)
TODO: check
CVE-2026-110777 (A flaw was found in evolution-data-server. Calendar events containing ...)
@@ -505,9 +505,9 @@ CVE-2026-110592 (BottleCRM 0.30 through 1.14.5 contains an HTML injection vulner
CVE-2026-110591 (OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption v ...)
TODO: check
CVE-2026-110536 (A vulnerability was determined in D-Link DIR-868L 2.01b05. This impact ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-110284 (The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Quizzes p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110270 (OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vul ...)
TODO: check
CVE-2026-110263 (OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerabili ...)
@@ -525,9 +525,9 @@ CVE-2026-110258 (OW2 ASM 3.0 before 9.11 contains an excessive memory allocation
CVE-2026-110257 (OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulner ...)
TODO: check
CVE-2026-110248 (Insertion of sensitive information into log files in the git_utils[.]p ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-110227 (Missing Authorization vulnerability in 10up Restricted Site Access res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-109971 (A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 ...)
TODO: check
CVE-2026-109970 (A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-ask ...)
@@ -537,29 +537,29 @@ CVE-2026-109969 (A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-a
CVE-2026-109968 (A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-s ...)
TODO: check
CVE-2026-109901 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-109527 (The Model Context Protocol Python SDK is the official Python SDK for M ...)
TODO: check
CVE-2026-109506 (Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-an ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-109439 (Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8. ...)
TODO: check
CVE-2026-109438 (3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an ...)
TODO: check
CVE-2026-108484 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108483 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108480 (Missing Authorization vulnerability in Skydropx Skydropx skydropx allo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108395 (The Model Context Protocol Java SDK is the official Java SDK for Model ...)
TODO: check
CVE-2026-108390 (Hestia Control Panel is a lightweight and powerful control panel for t ...)
TODO: check
CVE-2026-108291 (Deserialization of Untrusted Data vulnerability in itthinx Affiliates ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108151 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-108072 (Vulnerability due to incorrect permissions in TSplus Remote Access sha ...)
TODO: check
CVE-2026-108071 (Incorrect authentication vulnerability in the TSplus Remote Access mul ...)
@@ -571,51 +571,51 @@ CVE-2026-108065 (SQL Injection (CWE-89) in the SOAP GetUser method of the /preap
CVE-2026-107913
REJECTED
CVE-2026-107870 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107867 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107757 (The Gallery Custom Links plugin for WordPress is vulnerable to Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107756 (The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107754 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107751 (The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107650 (The GeoDirectory \u2013 WP Business Directory Plugin and Classified Li ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107631 (The Record of Consent Extension for Complianz plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107433 (Missing Authorization vulnerability in miniOrange WP OAuth Server mini ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107431 (Missing Authorization vulnerability in Crocoblock JetFormBuilder jetfo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107428 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107426 (Missing Authorization vulnerability in VideoWhisper.com Paid Videochat ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107425 (Missing Authorization vulnerability in Magepeople inc. Bus Ticket Book ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107424 (Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Front ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107422 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107421 (Session Fixation vulnerability in VideoWhisper.com Broadcast Live Vide ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107417 (Missing Authorization vulnerability in Muralidharan Ramasamy Push Noti ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-107381 (svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::pr ...)
TODO: check
CVE-2026-107171 (An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent ...)
TODO: check
CVE-2026-106599 (Deserialization of Untrusted Data vulnerability in Brainstorm Force Su ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-106465 (The NetX Secure DTLS server sends a HelloVerifyRequest carrying a fres ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-106464 (`_nx_secure_x509_parse_signature_data` computes the certificate signat ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-105874 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105659 (Uncontrolled Resource Consumption vulnerability in mtrudel bandit allo ...)
TODO: check
CVE-2026-105236 (Improper Certificate Validation vulnerability in the ssl application i ...)
@@ -625,47 +625,47 @@ CVE-2026-105107 (Koha is vulnerable to SQL injection in the Most-circulated item
CVE-2026-105106 (Koha is vulnerable to OS command injection in the Task Scheduler delet ...)
TODO: check
CVE-2026-105067 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-105066 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-104939 (Description NGINX Ingress Controller has a vulnerability when implemen ...)
- TODO: check
+ NOT-FOR-US: F5
CVE-2026-104909 (The Mang Board plugin for WordPress is vulnerable to Local File Inclus ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104795 (The insights-runtime-extractor runs as a privileged DaemonSet (`hostPI ...)
- TODO: check
+ NOT-FOR-US: Red Hat software not packaged in Debian
CVE-2026-104764 (The Post Export Import with Media plugin for WordPress is vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104761 (The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104748 (The SimpleForm \u2013 Form Maker to Chat Apps with Quiz, Poll and Mult ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104143 (DataEase is an open source data visualization and analysis tool. Prior ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-104142 (DataEase is an open source data visualization and analysis tool. Prior ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-104141 (DataEase is an open source data visualization and analysis tool. Authe ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-104103 (Ludwig is a low-code framework for building custom LLMs, neural networ ...)
TODO: check
CVE-2026-104086 (7-Zip before 26.03 contains an uninitialized memory disclosure vulnera ...)
TODO: check
CVE-2026-103994 (A Heap-based Buffer Overflow vulnerability in theVXLAN Gateway Daemon( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103993 (An Out-of-bounds Write vulnerability in the routing protocol daemon (r ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103975 (Appium is a cross-platform automation framework for all kinds of apps, ...)
TODO: check
CVE-2026-103974 (lichess.org is the forever free, adless and open source chess server. ...)
TODO: check
CVE-2026-103946 (An SQL injection vulnerability could allow an authenticated user to re ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-103930 (cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until ...)
TODO: check
CVE-2026-103929 (mise manages dev tools like node, python, cmake, and terraform. Prior ...)
TODO: check
CVE-2026-103907 (The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to un ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103905 (The authentication middleware of the JTL-Shop administration backend p ...)
TODO: check
CVE-2026-103904 (The public consent endpoint of JTL-Shop accepts arbitrary consent name ...)
@@ -673,21 +673,21 @@ CVE-2026-103904 (The public consent endpoint of JTL-Shop accepts arbitrary conse
CVE-2026-103671 (External control of assumed-Immutable web parameter issue exists in EC ...)
TODO: check
CVE-2026-103415 (When a TLS 1.3 client processes a HelloRetryRequest, it copies the ser ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-103414 (The GUIX binary resource (theme) loader sizes its arena and populates ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-103380 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103367 (The ShopMagic \u2013 email automation for WordPress plugin for WordPre ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103366 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103358 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-103308 (The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103081 (Improper Control of Generation of Code ('Code Injection') vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-102944 (cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, ...)
TODO: check
CVE-2026-102899 (Sentry is an application monitoring and error tracking platform. From ...)
@@ -695,9 +695,9 @@ CVE-2026-102899 (Sentry is an application monitoring and error tracking platform
CVE-2026-102893 (Zulip is an open-source team collaboration tool. In Zulip Server versi ...)
TODO: check
CVE-2026-102756 (DataEase is an open source data visualization and analysis tool. Prior ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-102755 (DataEase is an open source data visualization and analysis tool. Prior ...)
- TODO: check
+ NOT-FOR-US: DataEase
CVE-2026-102748 (Dgraph is an open source distributed GraphQL database. Prior to 25.4.0 ...)
TODO: check
CVE-2026-102695 (OmniFaces is a utility library for Faces. In OmniFaces versions before ...)
@@ -705,307 +705,307 @@ CVE-2026-102695 (OmniFaces is a utility library for Faces. In OmniFaces versions
CVE-2026-102682 (Pipecat is an open-source Python framework for building real-time voic ...)
TODO: check
CVE-2026-102479 (In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-102476 (In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-102471 (In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-102460 (In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-102354 (BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In ...)
TODO: check
CVE-2026-102185 (A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102184 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102183 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102182 (A Stack-based Buffer Overflow vulnerability in the kmd component of Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102180 (A Stack-based Buffer Overflow vulnerability in the routing protocol da ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102179 (An Out-of-bounds Write vulnerability in the routing protocol daemon (r ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102178 (A Stack-based Buffer Overflow vulnerability in the BGP routing daemon ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102177 (An Out-of-bounds Write vulnerability in the routing protocol daemon (r ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102176 (A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102175 (A Heap-based Buffer Overflow vulnerability in the sdxd service-deploym ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102174 (A Stack-based Buffer Overflow vulnerability in the iked IKE key-manage ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102087 (An Incomplete List of Disallowed Inputs vulnerability in the routing p ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102086 (A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102085 (An Improper Restriction of Communication Channel to Intended Endpoints ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102084 (An Improper Validation of Syntactic Correctness of Input vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102083 (An Improper Resource Locking vulnerability in the UTM processing of Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102082 (An Improper Handling of Missing Special Element vulnerability in the S ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102081 (A Missing Release of Memory after Effective Lifetime vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102080 (An Improper Resource Locking vulnerability in the clock synchronizatio ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102079 (An OS command injection vulnerability in the CLI of Juniper Networks J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102078 (A Use After Free vulnerability in the packet forwarding engine (pfe) o ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102077 (An Improper Check for Unusual or Exceptional Conditions vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102072 (An Improper Handling of Highly Compressed Data vulnerability in the gR ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102071 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102070 (A Reachable Assertion vulnerability in the Two-Way Active Measurement ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102069 (A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102068 (A Stack-based Buffer Overflow vulnerability in the kernel of Juniper N ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102067 (An Improper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102066 (A Improper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102065 (An Improper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102064 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102063 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102062 (An Use of Externally-Controlled Format String vulnerability in the ipf ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102061 (A Stack-based Buffer Overflow vulnerability in the phone-home daemon ( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102060 (A NULL Pointer Dereference vulnerability in the rpd process of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102059 (An Improper Neutralization of Special Elements used in an OS Command ( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102058 (A Reachable Assertion vulnerability in the bfdd daemon of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102057 (A Stack-based Buffer Overflow vulnerability in the jdhcpd process of J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102056 (An Out-of-bounds Read vulnerability in the cfmd process of Juniper Net ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102055 (A Stack-based Buffer Overflow vulnerability in the cfmd process of Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102054 (An Improper Handling of Length Parameter Inconsistency vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102053 (An Improper Release of Memory Before Removing Last Reference vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102052 (A Stack-based Buffer Overflow vulnerability in the jdhcpd process of J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102051 (An Improper Release of Memory Before Removing Last Reference vulnerabi ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102050 (A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102049 (A Stack-based Buffer Overflow vulnerability in the l2cpd process of Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102048 (An Allocation of Resources Without Limits or Throttling vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102047 (An Improper Validation of Consistency within Input vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102046 (A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102045 (An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102044 (A Reachable Assertion vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102043 (A Numeric Truncation Error vulnerability in the rpd process of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102042 (A Reachable Assertion vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102041 (A Reachable Assertion vulnerability in the rpd routing daemon of Junip ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102040 (A NULL Pointer Dereference vulnerability in the rpd routing daemon of ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102039 (A NULL Pointer Dereference vulnerability in the rpd process of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102037 (An XML Injection vulnerability in the Unified Threat Management daemon ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102036 (An Integer Overflow or Wraparound vulnerability in the l2ald process o ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102035 (A Reachable Assertion vulnerability in the l2ald process of Juniper Ne ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102034 (A Reachable Assertion vulnerability in the l2ald daemon of Juniper Net ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102033 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102032 (A Missing Release of Memory after Effective Lifetime vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102031 (An OS Command Injection vulnerability in TACACS of Juniper Networks Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102030 (An Incomplete Cleanup vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102029 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102028 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102027 (An Incorrect Calculation of Buffer Size vulnerability in the routing p ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102026 (An Improper Control of a Resource Through its Lifetime vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102025 (A Mismatched Memory Management Routines vulnerability in the routing p ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102024 (An Integer Overflow or Wraparound vulnerability in the routing daemon ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102023 (A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102022 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102021 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102020 (A Reachable Assertion vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102019 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102018 (A NULL Pointer Dereference vulnerability in the rpd process of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102017 (An Out-of-bounds Write vulnerability in the rpd process of Juniper Net ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102016 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102015 (A Heap-based Buffer Overflow vulnerability in the secure-dot1xd proces ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102014 (A Stack-based Buffer Overflow vulnerability in the authd process of Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102013 (A NULL Pointer Dereference vulnerability in the na-grpcd process of Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102012 (A Reachable Assertion vulnerability in the na-grpcd process of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102011 (A Reachable Assertion vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-102000 (A Reachable Assertion vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101999 (A Reachable Assertion vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101997 (An Improper Neutralization of Special Elements used in an SQL Command ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101996 (A Reachable Assertion vulnerability in the l2ald daemon of Juniper ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101995 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101994 (An Improper Handling of Length Parameter Inconsistency vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101993 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101992 (An Improper Input Validation vulnerability in the routing protocol dae ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101991 (An Improper Handling of Length Parameter Inconsistency vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101990 (A Stack-based Buffer Overflow vulnerability in the routing protocol da ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101989 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101988 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101987 (AnImproper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101986 (An Improper Authentication vulnerability in J-Web of Juniper Networks ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101985 (A Improper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101984 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101983 (A Stack-based Buffer Overflow vulnerability in the httpd process of Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101982 (A Stack-based Buffer Overflow vulnerability in the routing protocol da ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101981 (A Stack-based Buffer Overflow vulnerability in the routing protocol da ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101980 (An Integer Underflow vulnerability in the kernel of Juniper Networks J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101979 (A Stack-based Buffer Overflow vulnerability in the authd Juniper Netwo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101978 (An OS Command Injection vulnerability in the bootzd zero-touch provisi ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101977 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101976 (An Out-of-bounds Write vulnerability in the routing protocol daemon (r ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101975 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101974 (An Improper Validation of Specified Quantity in Input vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101973 (A NULL Pointer Dereference vulnerability in the pkid component of Juni ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101972 (An Integer Overflow or Wraparound vulnerability in the routing protoco ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101971 (An Allocation of Resources Without Limits or Throttling vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101970 (A Use After Free vulnerability in the rpd PIM Join/Prune processing of ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101969 (An Improper Input Validation vulnerability in the rpd process of Junip ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101968 (An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd pro ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101967 (An OS Command Injection vulnerability in the bootzd zero-touch provisi ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101966 (A Use of Externally-Controlled Format String vulnerability in the jti- ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101965 (An Use of Externally-Controlled Format String vulnerability in the gRP ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101964 (A Reachable Assertion vulnerability in the routing protocol daemon (rp ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101963 (An Incorrect Calculation vulnerability in the routing protocol daemon ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101962 (An Improper Handling of Length Parameter Inconsistency vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101961 (A NULL Pointer Dereference vulnerability in the routing-policy nexthop ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101960 (An Out-of-bounds Write vulnerability in the routing protocol daemon (r ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101959 (A Function Call With Incorrect Variable or Reference as Argument vulne ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101957 (An Improper Initialization vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101956 (An Improper Authentication vulnerability in the J-Web web management c ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101955 (A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL o ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101954 (An Improper Authentication vulnerability in the J-Web management inter ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101952 (An Improper Validation of Consistency within Input vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101951 (An Improper Validation of Consistency within Input vulnerability in th ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101950 (A Heap-based Buffer Overflow vulnerability in the SVR component of Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101949 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101948 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101946 (An Out-of-bounds Read vulnerability in the rpd process of Juniper Netw ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101945 (An Integer Overflow or Wraparound vulnerability in the rpd process of ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101944 (An Integer Overflow or Wraparound vulnerability in the routing protoco ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101943 (An Improper Input Validation vulnerability in the routing protocol dae ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101942 (An Improper Handling of Length Parameter Inconsistency vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101941 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101940 (A NULL Pointer Dereference vulnerability in the rpd routing daemon of ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101939 (A NULL Pointer Dereference vulnerability in the routing protocol daemo ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101938 (An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101937 (A Signed to Unsigned Conversion Error vulnerability in the srxpfe of J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101936 (A Reachable Assertion vulnerability in the srxpfe process of Juniper N ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101934 (An Out-of-bounds Write vulnerability in eventd of Juniper Networks Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101927 (A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networ ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-101897 (Angular is a development platform for building mobile and desktop web ...)
TODO: check
CVE-2026-101896 (Angular is a development platform for building mobile and desktop web ...)
@@ -1021,13 +1021,13 @@ CVE-2026-101338 (When a SVCB or HTTPS RR has filled the wire format RDATA up to
CVE-2026-101337 (When base64 data is split up in pieces, of 3 character or less, tokens ...)
TODO: check
CVE-2026-101301 (The WPCode WordPress plugin before 2.4.0 does not correctly verify tha ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101217 (Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Im ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-101216 (Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Im ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-101215 (Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Im ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-101025 (Description NGINX JavaScript (njs) has a vulnerability where the bui ...)
TODO: check
CVE-2026-101019 (Description NGINX JavaScript (njs) has a vulnerability where the njs X ...)
@@ -1049,11 +1049,11 @@ CVE-2026-100229 (A flaw was found in GStreamer's H.266 codec parser library (lib
CVE-2026-100169 (Improper Authentication in the social account linking path of the Prow ...)
TODO: check
CVE-2026-100163 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-0322 (A remote code execution (RCE) vulnerability in the management interfac ...)
- TODO: check
+ NOT-FOR-US: Palo Alto Networks
CVE-2025-9373 (The PeproDev Branches Map plugin for WordPress is vulnerable to Stored ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2025-71433 (Kaneo before 2.1.6 contains a missing authorization vulnerability that ...)
TODO: check
CVE-2024-58392 (PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability i ...)
@@ -1067,7 +1067,7 @@ CVE-2017-20286 (DevIL through 1.8.0 contains a heap-based buffer overflow in iGe
CVE-2016-20099 (L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_ ...)
TODO: check
CVE-2016-15060 (A vulnerability was found in PCMan FTP Server up to 2.0.7. This affect ...)
- TODO: check
+ NOT-FOR-US: PCMan FTP Server
CVE-2026-98418 (In the Linux kernel, the following vulnerability has been resolved: s ...)
- linux 7.2.8-1
[trixie] - linux <not-affected> (Vulnerable code not present)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec7de732af273c1f4fef80bc4a9f39035bc210e6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ec7de732af273c1f4fef80bc4a9f39035bc210e6
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/4cc7e70a/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list