[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Oct 27 19:21:05 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d821bbdf by security tracker role at 2026-10-27T19:18:46+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,69 +1,69 @@
CVE-2026-94347 (PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7 ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-94346 (PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7 ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-93866 (An integer overflow vulnerability in the WebSocket connection handling ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93865 (A missing authentication vulnerability in the Fireware OS FireCluster ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93864 (A link following vulnerability in WatchGuard Fireware OS\u2019s firewa ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93862 (An out-of-bounds read vulnerability in the FireCluster Sync processing ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93857 (A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-93434 (An XPath injection vulnerability in WatchGuard Fireware OS's SSH authe ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-92885 (The Qode Membership plugin for WordPress is vulnerable to Authenticati ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92546 (Authentication bypass by spoofing vulnerability in Keepnet Labs Cybers ...)
TODO: check
CVE-2026-92377 (Improper access control in the Patch Management update mechanism of Te ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92376 (Improper authentication in the inter-process communication (IPC) mecha ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92375 (An improper access control vulnerability in the IPC communication betw ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92374 (A time-of-check time-of-use (TOCTOU) race condition combined with impr ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-92372 (An out-of-bounds write vulnerability in the screen-image decoder of Te ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-90732 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90731 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90730 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90729 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90728 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90727 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90726 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90725 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90465 (A missing authentication vulnerability in the FireCluster Sync process ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-90464 (An external control of file path vulnerability in a WatchGuard Firewar ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-90442 (A stack-based buffer overflow vulnerability in the Fireware OS certd p ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-87897 (A SSRF vulnerability found that enables access to internal Chrome Devt ...)
TODO: check
CVE-2026-87086 (Tanium addressed a denial of service vulnerability in Provision.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-87085 (Tanium addressed a SQL injection vulnerability in Provision.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-86577 (Out-of-bounds Write Vulnerability in JP1 Products. This issue affects ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-86576 (Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-86575 (Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-86574 (Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affe ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-85299 (A Missing Authorization vulnerability in the disks.createSnapshot and ...)
TODO: check
CVE-2026-82986 (The user in a group can bypass the group restriction set by an adminis ...)
@@ -73,21 +73,21 @@ CVE-2026-82984 (When a team was configured as "visible to everyone", the web UI
CVE-2026-82983 (The Tables app's share-listing endpoint (GET /apps/tables/share/table/ ...)
TODO: check
CVE-2026-82332 (An improper authentication vulnerability in WatchGuard Fireware OS's A ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-82122 (Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affec ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82121 (Origin Validation Error Vulnerability in HiRDB. This issue affects H ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82120 (Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affect ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82119 (OS Command Injection Vulnerability in HiRDB. This issue affects HiRD ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82118 (Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affec ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82117 (Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-82116 (Missing Authentication for Critical Function Vulnerability in HiRDB. ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-78845 (Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart L ...)
TODO: check
CVE-2026-77173 (A user could create a docx or odt file with a # in the filename with c ...)
@@ -99,43 +99,43 @@ CVE-2026-77171 (A public shared collective always allowed recipients of the link
CVE-2026-77167 (Abusing the federated share endpoint, an attacker can write arbitrary ...)
TODO: check
CVE-2026-76939 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76938 (Authentication Bypass Vulnerability in JP1/Automatic Job Management Sy ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76937 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76936 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76935 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76934 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76933 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-76932 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Managem ...)
- TODO: check
+ NOT-FOR-US: Hitachi
CVE-2026-68866 (PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7 ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-67400 (A missing token type check allowed to retrieve more additional informa ...)
TODO: check
CVE-2026-65220 (A logic flaw in the BMC IPMI implementation may allow an attacker to s ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65219 (A flaw in the BMC RAKP+ implementation may allow an attacker to send a ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65213 (This issue may allow an IPMI authenticated administrator to execute co ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65211 (This issue may allow an authenticated IPMI Administrator to read and w ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65210 (This issue may allow an authenticated IPMI Administrator to read arbit ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-65151 (NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker cou ...)
TODO: check
CVE-2026-65145 (NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker co ...)
TODO: check
CVE-2026-65120 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker could c ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-65119 (NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCac ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-57202 (Asterisk is an open source private branch exchange and telephony toolk ...)
TODO: check
CVE-2026-57201 (Asterisk is an open source private branch exchange and telephony toolk ...)
@@ -153,45 +153,45 @@ CVE-2026-57188 (Asterisk is an open source private branch exchange and telephony
CVE-2026-57185 (Asterisk is an open source private branch exchange and telephony toolk ...)
TODO: check
CVE-2026-56084 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-54462 (Knative pkg provides common packages shared across Knative repositorie ...)
TODO: check
CVE-2026-4337 (Unrestricted Upload of File with Dangerous Type vulnerability in the P ...)
TODO: check
CVE-2026-48380 (Substance3D - Painter is affected by an out-of-bounds read vulnerabili ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48379 (Substance3D - Painter is affected by a Stack-based Buffer Overflow vul ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48360 (Adobe Connect is affected by an Improper Control of Generation of Code ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-47486 (NVIDIA PhysX for all platforms contains a vulnerability where an attac ...)
TODO: check
CVE-2026-41022 (Eaton easySoft improperly validates TLS certificates presented by easy ...)
- TODO: check
+ NOT-FOR-US: Eaton
CVE-2026-41021 (Eaton easyE4 uses an insufficiently strong password policy. An attacke ...)
- TODO: check
+ NOT-FOR-US: Eaton
CVE-2026-41020 (Eaton easyE4 uses a static nonce during authentication, which could al ...)
- TODO: check
+ NOT-FOR-US: Eaton
CVE-2026-24269 (NVIDIA TensorRT-LLM contains a vulnerability where an attacker could c ...)
- TODO: check
+ NOT-FOR-US: NVIDIA
CVE-2026-18451 (The HTML5 KVM-over-IP console authenticates with a token returned by t ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-18450 (The BMC does not correctly enforce integrity and encryption requiremen ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-18449 (The BMC does not correctly enforce integrity and encryption requiremen ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-16521 (An OS command injection vulnerability exists because of insufficient i ...)
- TODO: check
+ NOT-FOR-US: Supermicro
CVE-2026-16491 (Grafana\u2019s RBAC service ignored the requested folder when checking ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-16307 (Authorization bypass through User-Controlled key vulnerability in Neti ...)
TODO: check
CVE-2026-15586 (Improper restriction of excessive authentication attempts vulnerabilit ...)
TODO: check
CVE-2026-13162 (An OS command vulnerability exists in CoreTec productthat allows authe ...)
- TODO: check
+ NOT-FOR-US: Hitachi Energy
CVE-2026-12887 (In affected versions of Octopus Server, a user with permission to uplo ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-118180 (When logging in to a Matrix account, Thunderbird used the homeserver a ...)
TODO: check
CVE-2026-118179 (Clicking a news: or snews: link that referenced a message-ID made Thun ...)
@@ -597,7 +597,7 @@ CVE-2026-117555 (CImg through 4.0.6 contains a heap out-of-bounds read vulnerabi
CVE-2026-117554 (Admidio before 5.0.17 contains an improper access control vulnerabilit ...)
TODO: check
CVE-2026-117553 (Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass ...)
- TODO: check
+ NOT-FOR-US: Umbraco CMS
CVE-2026-117541 (svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception ...)
TODO: check
CVE-2026-117540 (svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vul ...)
@@ -619,7 +619,7 @@ CVE-2026-117533 (REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site s
CVE-2026-117532 (REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass ...)
TODO: check
CVE-2026-117530 (In JetBrains Junie CLI before 26.8.17 command execution was possible d ...)
- TODO: check
+ NOT-FOR-US: JetBrains
CVE-2026-117526 (A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by ...)
TODO: check
CVE-2026-117516 (A weakness has been identified in oretnom23 php-travel-agency-system. ...)
@@ -655,9 +655,9 @@ CVE-2026-117494 (Cross-Site Scripting (XSS) in the processing of SVG images subm
CVE-2026-117493 (Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards ...)
TODO: check
CVE-2026-117466 (In affected versions of Octopus Server, a user holding the System Mana ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-117341 (In affected versions of Octopus Server, creating a user invitation wri ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-116900 (REDAXO before 5.21.4 contains a stored cross-site scripting vulnerabil ...)
TODO: check
CVE-2026-116899 (REDAXO before 5.21.4 contains a broken access control vulnerability th ...)
@@ -719,9 +719,9 @@ CVE-2026-116872 (Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorith
CVE-2026-116871 (Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursi ...)
TODO: check
CVE-2026-116870 (In affected versions of Octopus Server, OIDC token issuer validation w ...)
- TODO: check
+ NOT-FOR-US: Octopus Deploy
CVE-2026-116863 (Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116683 (CTFer.io's CTFd Terraform Provider manages CTFd resources as code. Fro ...)
TODO: check
CVE-2026-116682 (FileBrowser Quantum is a free, self-hosted, web-based file manager. Pr ...)
@@ -745,31 +745,31 @@ CVE-2026-116673 (systeminformation is a System and OS information library for no
CVE-2026-116672 (Authlib is a Python library which builds OAuth and OpenID Connect serv ...)
TODO: check
CVE-2026-116662 (Tanium addressed a compression bomb vulnerability in Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116660 (Tanium addressed an improper access controls vulnerability in Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116659 (Tanium addressed an uncontrolled resource consumption vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116658 (Tanium addressed a denial of service vulnerability in Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116657 (Tanium addressed a denial of service vulnerability in Enforce.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116656 (Tanium addressed an uncontrolled resource consumption vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116649 (Tanium addressed an improper output sanitization vulnerability in Enfo ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116647 (Tanium addressed an improper output sanitization vulnerability in Comp ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-116627 (Improper neutralization of input during web page generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: Devolutions
CVE-2026-115495 (Cleartext Transmission of Sensitive Information vulnerability in the W ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-115413 (Missing token audience validation in the OAuth authentication mode of ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-115408 (In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-115216 (In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-114598 (In EPICS Base release 7.0.10 and prior, an insufficient validation of ...)
TODO: check
CVE-2026-114597 (In EPICS Base release 7.0.10 and prior, an insufficient validation of ...)
@@ -779,97 +779,97 @@ CVE-2026-114596 (In EPICS Base release 7.0.10 and prior, an improper validation
CVE-2026-114595 (In EPICS Base release 7.0.10 and prior, an integer overflow in network ...)
TODO: check
CVE-2026-114409 (Docker Desktop before version 4.97.0 could write third-party API keys ...)
- TODO: check
+ NOT-FOR-US: Docker products not packaged in Debian
CVE-2026-113881 (A stack-based buffer overflow vulnerability in Fireware OS's VPN Netwo ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-113775 (A maliciously crafted dynamic library, when loaded from an arbitrary p ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-113644 (In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-112710 (A heap-based buffer overflow vulnerability exists in the Fireware OS a ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-112709 (A heap-based buffer overflow vulnerability in the Fireware OS authenti ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-112362 (@fastify/express is a Fastify plugin that runs Express middleware insi ...)
TODO: check
CVE-2026-112353 (GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stor ...)
TODO: check
CVE-2026-111585 (An integer overflow in the remote-control screen processing component ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111584 (A race condition in the installation process of TeamViewer Remote Mana ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111583 (Improper access control in the installer staging directory used by Tea ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111582 (A DLL loading vulnerability in the TeamViewer Remote Management Monito ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2026-111548 (A stack-based buffer overflow vulnerabilityexists in the web managemen ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111461 (An OS command injection vulnerability exists inOnCell G3150A-LTE Serie ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111460 (A hard-coded cryptographic key vulnerability exists in the OnCell G315 ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111459 (An improper certificate validation vulnerability exists in Moxa Remote ...)
- TODO: check
+ NOT-FOR-US: Moxa
CVE-2026-111107 (A NULL pointer dereference vulnerability in WatchGuard Fireware OS\u20 ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-111054
REJECTED
CVE-2026-110737 (The push endpoint of a Vaadin application that uses server push reflec ...)
- TODO: check
+ NOT-FOR-US: Vaadin
CVE-2026-10756 (TRO600 contains a vulnerability that allows an authenticated attacker ...)
- TODO: check
+ NOT-FOR-US: Hitachi Energy
CVE-2026-10752 (The Advanced Custom Fields: Extended plugin for WordPress is vulnerabl ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-10537 (A misconfiguration issue in the affected service in Control-M/Enterpri ...)
TODO: check
CVE-2026-10511 (The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109995 (The Advanced Views \u2013 Display Framework for Gutenberg & Elementor ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-109823 (An attacker can read the name of filesystem paths of your application ...)
TODO: check
CVE-2026-108333 (Tanium addressed a use-after-free vulnerability in Threat Response Cli ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108332 (Tanium addressed an improper link resolution before file access vulner ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108331 (Tanium addressed an infinite loop vulnerability in Threat Response Cli ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108330 (Tanium addressed an information disclosure vulnerability in Threat Res ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108329 (Tanium addressed an unauthorized code execution vulnerability in Threa ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108328 (Tanium addressed an insertion of sensitive information into log file v ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108326 (Tanium addressed an improper certificate validation vulnerability in S ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108325 (Tanium addressed an insertion of sensitive information into log file v ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108316 (Tanium addressed an information disclosure vulnerability in Tanium Ser ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108313 (Tanium addressed an incorrect privilege assignment vulnerability in Ta ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108311 (Tanium addressed an insufficient logging vulnerability in Tanium Serve ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108310 (Tanium addressed a denial of service vulnerability in Tanium Server.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108309 (Tanium addressed an uncontrolled resource consumption vulnerability in ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108308 (Tanium addressed a SQL injection vulnerability in Patch.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108307 (Tanium addressed a heap-based buffer overflow vulnerability in Index.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108306 (Tanium addressed a local privilege escalation vulnerability in End-Use ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108305 (Tanium addressed a local privilege escalation vulnerability in End-Use ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108304 (Tanium addressed a local privilege escalation vulnerability in End-Use ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108303 (Tanium addressed an unauthorized code execution vulnerability in Certi ...)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108302 (Tanium addressed an improper access controls vulnerability in Comply.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108301 (Tanium addressed an improper access controls vulnerability in Comply.)
- TODO: check
+ NOT-FOR-US: Tanium
CVE-2026-108142 (A vulnerability allowing an unauthenticated attacker to bypass authori ...)
TODO: check
CVE-2026-108141 (A vulnerability allowing an authenticated user with the Restore Operat ...)
@@ -877,11 +877,11 @@ CVE-2026-108141 (A vulnerability allowing an authenticated user with the Restore
CVE-2026-108140 (A vulnerability allowing an authenticated user with the Restore Operat ...)
TODO: check
CVE-2026-108015 (Private keys for eight eMudhra intermediate CA certificates have been ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-108014 (Private keys for eight eMudhra intermediate CA certificates have been ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-107672 (A maliciously crafted .stack.json file can trigger a trusted Markdown ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-107671 (A vulnerability allowing an attacker with valid Administrator credenti ...)
TODO: check
CVE-2026-107590 (An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based ...)
@@ -899,7 +899,7 @@ CVE-2026-107145 (The twofactor_gauthenticator plugin for Roundcube is vulnerable
CVE-2026-107067 (An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local ...)
TODO: check
CVE-2026-106087 (TRO600 contains an arbitrary file read vulnerability. An unauthenticat ...)
- TODO: check
+ NOT-FOR-US: Hitachi Energy
CVE-2026-106078 (A vulnerability allowing an unauthenticated attacker to bypass REST AP ...)
TODO: check
CVE-2026-106077 (A vulnerability allowing a user with the Veeam Backup for Microsoft 36 ...)
@@ -909,61 +909,61 @@ CVE-2026-106076 (A vulnerability allowing an authenticated organization-transfer
CVE-2026-105987 (KGS Software tia Viewer is vulnerable to Stored XSS via the annotation ...)
TODO: check
CVE-2026-105781 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105780 (Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105779 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105489 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-105477 (A vulnerability in Veeam Agent for Linux allows for local privilege es ...)
TODO: check
CVE-2026-105323 (Improper neutralization of input during web page generation ('cross-si ...)
TODO: check
CVE-2026-104381 (A missing authentication vulnerability in Fireware OS's FireCluster st ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-104354 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104353 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104351 (Adobe Campaign Classic (ACC) is affected by an Improper Control of Gen ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104350 (Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scr ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104349 (Creative Cloud Desktop is affected by an Uncontrolled Search Path Elem ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-104189 (The 3D Viewer for Nextcloud is a comprehensive 3D model viewer applica ...)
TODO: check
CVE-2026-103594 (A stack-based buffer overflow vulnerability in Fireware OS's WireGuard ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-103593 (A stack-based buffer overflow vulnerability in the Fireware OS logging ...)
- TODO: check
+ NOT-FOR-US: WatchGuard
CVE-2026-102816 (An authorization vulnerability exists in the country or region configu ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102815 (An operating-system command injection vulnerability exists in the tmpS ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102814 (An authentication weakness exists in the TP-Link TDDP v2 service of TP ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102813 (An authentication flaw exists in the password-recovery functionality o ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102812 (A hard-coded cryptographic key vulnerability exists in the user-config ...)
- TODO: check
+ NOT-FOR-US: TPLink
CVE-2026-102800 (Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in D ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102789 (Joomla Extension - balbooa.com - Missing Authorization Check on Editor ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102788 (Joomla Extension - balbooa.com - Unauthenticated SQL injection in Grid ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102787 (Joomla Extension - phoca.cz - CSRF in category management in Phoca Dow ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102638 (A maliciously crafted HTML payload in the description of an electronic ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-102637 (A maliciously crafted HTML payload in the documentName parameter of a ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-102636 (A maliciously crafted HTML payload in a design name, when displayed af ...)
- TODO: check
+ NOT-FOR-US: Autodesk
CVE-2026-101034 (An attacker who obtained the hardcoded key could decrypt domain/servic ...)
- TODO: check
+ NOT-FOR-US: Symantec
CVE-2026-100164 (Observable response discrepancy vulnerability in Rolantis Information ...)
TODO: check
CVE-2025-64394 (A vulnerability allowing a low-privileged local user to write arbitrar ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d821bbdfb3e46acbd1211abd3b582c11e42b5a7e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d821bbdfb3e46acbd1211abd3b582c11e42b5a7e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/e02d4293/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list