[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5700a7f by Salvatore Bonaccorso at 2026-10-20T13:02:12+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
 CVE-2026-97627 (Hidden functionality issue exists in Multiple DVRs (Digital Video Reco ...)
-	TODO: check
+	NOT-FOR-US: Atsumi Electric
 CVE-2026-96903 (The Easy Property Listings WordPress plugin before 3.5.27 does not per ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-96902 (The Easy Property Listings WordPress plugin before 3.5.28 does not res ...)
@@ -93,23 +93,23 @@ CVE-2026-84490 (This issue was addressed through improved state management. This
 CVE-2026-82166 (Dell Application Store, versions prior to 26.05.0.7, contain a Missing ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-77938 (Letta through 0.16.8 contains an information disclosure vulnerability  ...)
-	TODO: check
+	NOT-FOR-US: letta-ai letta
 CVE-2026-77937 (Letta through 0.16.8 contains an authentication bypass vulnerability t ...)
-	TODO: check
+	NOT-FOR-US: letta-ai letta
 CVE-2026-77936 (Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_S ...)
-	TODO: check
+	NOT-FOR-US: letta-ai letta
 CVE-2026-77935 (Coze Studio through 0.5.1 contains an insecure direct object reference ...)
-	TODO: check
+	NOT-FOR-US: Coze Studio
 CVE-2026-77934 (Coze Studio before 0.5.0 contains an insecure default configuration th ...)
-	TODO: check
+	NOT-FOR-US: Coze Studio
 CVE-2026-77933 (DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-77932 (DB-GPT through 0.8.2 contains an unauthenticated remote code execution ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-77930 (EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerabil ...)
-	TODO: check
+	NOT-FOR-US: EvoScientist
 CVE-2026-77926 (Aix-DB 1.2.4 contains a remote code execution vulnerability that allow ...)
-	TODO: check
+	NOT-FOR-US: Aix-DB
 CVE-2026-77684 (The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/h ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-76788 (The OSDP Control Panel reply parser cp_decode_response() in subsys/mgm ...)
@@ -119,7 +119,7 @@ CVE-2026-76787 (The UpdateHub firmware-over-the-air client parses the CoAP probe
 CVE-2026-75753 (Missing Authentication for a Critical Function in certain ASUS routers ...)
 	NOT-FOR-US: ASUS
 CVE-2026-75128 (Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endp ...)
-	TODO: check
+	NOT-FOR-US: Langchain-Chatchat
 CVE-2026-71170 (Dell Application Store, versions prior to 26.05.0.7, contains an Uncon ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-71169 (Dell Application Store, versions prior to 26.05.0.7, contain an Incorr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5700a7f4aba991118af6253648d6436200a29bd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5700a7f4aba991118af6253648d6436200a29bd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/3f1e7bd8/attachment.htm>