[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
22c2653e by Salvatore Bonaccorso at 2026-10-27T21:02:42+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32,7 +32,7 @@ CVE-2026-93434 (An XPath injection vulnerability in WatchGuard Fireware OS's SSH
 CVE-2026-92885 (The Qode Membership plugin for WordPress is vulnerable to Authenticati ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-92546 (Authentication bypass by spoofing vulnerability in Keepnet Labs Cybers ...)
-	TODO: check
+	NOT-FOR-US: Agentic AI / Agentic Ally
 CVE-2026-92377 (Improper access control in the Patch Management update mechanism of Te ...)
 	NOT-FOR-US: TeamViewer
 CVE-2026-92376 (Improper authentication in the inter-process communication (IPC) mecha ...)
@@ -80,7 +80,7 @@ CVE-2026-86575 (Stack-based Buffer Overflow Vulnerability in JP1 Products.  This
 CVE-2026-86574 (Heap-based Buffer Overflow Vulnerability in JP1/Base.  This issue affe ...)
 	NOT-FOR-US: Hitachi
 CVE-2026-85299 (A Missing Authorization vulnerability in the disks.createSnapshot and  ...)
-	TODO: check
+	NOT-FOR-US: Google Compute Engine
 CVE-2026-82986 (The user in a group can bypass the group restriction set by an adminis ...)
 	TODO: check
 CVE-2026-82984 (When a team was configured as "visible to everyone", the web UI correc ...)
@@ -104,7 +104,7 @@ CVE-2026-82117 (Authentication Bypass by Spoofing Vulnerability in HiRDB.  This
 CVE-2026-82116 (Missing Authentication for Critical Function Vulnerability in HiRDB.   ...)
 	NOT-FOR-US: Hitachi
 CVE-2026-78845 (Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart L ...)
-	TODO: check
+	NOT-FOR-US: Aidot
 CVE-2026-77173 (A user could create a docx or odt file with a # in the filename with c ...)
 	TODO: check
 CVE-2026-77172 (App passwords were allowed to bypass password confirmation on sensitiv ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22c2653e1c9e31e64b1f8c871f7910b26980ccf4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22c2653e1c9e31e64b1f8c871f7910b26980ccf4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261027/eebe2e75/attachment.htm>