[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2256d822 by Salvatore Bonaccorso at 2026-10-23T10:16:52+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,11 +1,11 @@
 CVE-2026-97785 (Improper authentication in AAD App Proxy allows an unauthorized attack ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-97635 (The Agent Zero Web UI before 1.15 does not correctly sanitize user-pro ...)
-	TODO: check
+	NOT-FOR-US: Agent Zero Web UI
 CVE-2026-97631 (EDK2 contains a vulnerability in BIOS where a user may cause \u201cOut ...)
 	TODO: check
 CVE-2026-96616 (Authentication tokens issued by the E3's web management interface on l ...)
-	TODO: check
+	NOT-FOR-US: E3
 CVE-2026-96293 (A cleartext storage of sensitive information vulnerability in WatchGua ...)
 	NOT-FOR-US: WatchGuard
 CVE-2026-96185 (Stack-based buffer overflow in Microsoft Exchange Online allows an aut ...)
@@ -59,11 +59,11 @@ CVE-2026-94264 (The Advanced Custom Fields: Extended WordPress plugin before 0.9
 CVE-2026-94262 (The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8,  ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-93471 (Improper Handling of Highly Compressed Data (Data Amplification) in es ...)
-	TODO: check
+	NOT-FOR-US: dropbox esaml
 CVE-2026-93336 (Missing authorization in the unit resources download route in Canonica ...)
 	TODO: check
 CVE-2026-92450 (The authentication framework used by affected Kiloview E3 NDI encoder  ...)
-	TODO: check
+	NOT-FOR-US: E3
 CVE-2026-89410 (In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigg ...)
 	NOT-FOR-US: Silicon Labs
 CVE-2026-89409 (In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2256d8228bebc36641286d69636b90569891cfca

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2256d8228bebc36641286d69636b90569891cfca
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/bd2ba4c1/attachment-0001.htm>