[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat Oct 17 08:15:12 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4765992d by security tracker role at 2026-10-17T07:15:04+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,7 @@
CVE-2026-97314 (The ThirstyAffiliates WordPress plugin before 3.12.1 does not check t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96660 (The User Registration & Membership \u2013 Free & Paid Memberships, Sub ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96628 (Arcane is an interface for managing Docker containers, images, network ...)
TODO: check
CVE-2026-96627 (Arcane is an interface for managing Docker containers, images, network ...)
@@ -13,39 +13,39 @@ CVE-2026-96620 (Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.1
CVE-2026-96542 (Incorrect permission assignment (CWE-732) in the standalone installer ...)
TODO: check
CVE-2026-92978 (The User Registration & Membership \u2013 Free & Paid Memberships, Sub ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92798 (The User Registration & Membership plugin for WordPress is vulnerable ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92715 (The Tutor LMS \u2013 eLearning and online course solution plugin for W ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92433 (The Patreon WordPress plugin before 1.10.0 does not verify a nonce whe ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92432 (The Patreon WordPress plugin before 1.10.0 does not validate a user-su ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92431 (The Patreon WordPress plugin before 1.10.0 does not perform an authori ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-91074 (The BSK PDF Manager WordPress plugin through 3.8.1 does not properly s ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89096 (A flaw was found in nfs-utils. An unauthenticated remote attacker can ...)
TODO: check
CVE-2026-81344 (The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-81343 (The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-69080 (Exposure of SQL Black List to an Unauthorized Actor vulnerability in A ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-69077 (Exposure ofunauthorized cross-project job manipulation vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-69076 (Exposure of Job Discard to an Unauthorized Actor vulnerability in Apac ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-68573 (Improper Authentication vulnerability in Apache Kylin. Unauthenticated ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-68572 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-68498 (StreamReadConstraints.maxNameLength (default 50,000 characters) is int ...)
TODO: check
CVE-2026-64862 (Frappe HR is an open-source human resources management solution (HRMS) ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-62438 (A flaw was found in GIMP. An attacker can cause a Denial of Service (D ...)
TODO: check
CVE-2026-61726 (Tandoor Recipes is an application for managing recipes, planning meals ...)
@@ -57,7 +57,7 @@ CVE-2026-59966 (Tandoor Recipes is an application for managing recipes, planning
CVE-2026-59963 (Tandoor Recipes is an application for managing recipes, planning meals ...)
TODO: check
CVE-2026-55796 (Frappe HR is an open-source human resources management solution (HRMS) ...)
- TODO: check
+ NOT-FOR-US: Frappe
CVE-2026-49410 (OpenHuman is an open-source agent harness available as a desktop appli ...)
TODO: check
CVE-2026-30971 (ZoneMinder is a free, open source closed-circuit television software a ...)
@@ -75,35 +75,35 @@ CVE-2026-111823 (Mage OSS through 0.9.80 before 76c4f46 can proceed with session
CVE-2026-111802 (A flaw was found in Nautilus. When a removable drive or disk image is ...)
TODO: check
CVE-2026-111726 (The Themify Builder plugin for WordPress is vulnerable to Stored Cross ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111602 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111601 (The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerab ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-111044 (Sunshine is a self-hosted game stream host for Moonlight. From 2026.32 ...)
TODO: check
CVE-2026-110653 (The Appointment Booking Plugin \u2013 LatePoint | Calendar & Schedulin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110527 (The WP User Manager WordPress plugin before 2.9.20 does not roll back ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110384 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-110268 (The Post Export Import with Media plugin for WordPress is vulnerable t ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109989 (The Themify Popup plugin for WordPress is vulnerable to Stored Cross-S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109985 (The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109369 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109368 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109208 (The LearnPress \u2013 WordPress LMS Plugin for Create and Sell Online ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-108743 (Improper Neutralization of Special Elements used in an OS Command ('OS ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-108709 (Authentication bypass within in-house network in Apache Kylin.Impact m ...)
- TODO: check
+ NOT-FOR-US: Apache software not packaged in Debian
CVE-2026-108374 (ERPNext is a free and open source Enterprise Resource Planning tool. P ...)
TODO: check
CVE-2026-108373 (ERPNext is a free and open source Enterprise Resource Planning tool. P ...)
@@ -111,33 +111,33 @@ CVE-2026-108373 (ERPNext is a free and open source Enterprise Resource Planning
CVE-2026-108372 (Open and provider-neutral, LoopX is a lightweight state kernel and loc ...)
TODO: check
CVE-2026-108123 (The WP Booking System \u2013 Booking Calendar plugin for WordPress is ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107763 (The Fastcache by Host.it plugin for WordPress is vulnerable to authori ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107762 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107752 (The Welcart e-Commerce plugin for WordPress is vulnerable to generic S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107744 (The LearnPress \u2013 WordPress LMS Plugin for Create and Sell Online ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-107346
REJECTED
CVE-2026-106549
REJECTED
CVE-2026-106470 (The WP Data Access WordPress plugin before 5.5.88 does not have autho ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104736 (The LearnPress plugin for WordPress is vulnerable to PHP Object Inject ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104734 (The Kirki \u2013 Freeform Page Builder, Website Builder & Customizer p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104246 (The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-104122 (The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and es ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103899 (The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerabl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103376 (The PeachPay \u2014 Payments & Express Checkout for WooCommerce (suppo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102834 (JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedi ...)
TODO: check
CVE-2026-102608 (ZoneMinder is a free, open source closed-circuit television software a ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4765992d4a69fe63bcb15586e7834270332243c9
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4765992d4a69fe63bcb15586e7834270332243c9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/e0595df6/attachment.htm>
More information about the debian-security-tracker-commits
mailing list