[Git][security-tracker-team/security-tracker][master] Process some CVEs related to Nexcloud products

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5572e5b9 by Salvatore Bonaccorso at 2026-10-28T07:05:52+01:00
Process some CVEs related to Nexcloud products

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -101,7 +101,7 @@ CVE-2026-90464 (An external control of file path vulnerability in a WatchGuard F
 CVE-2026-90442 (A stack-based buffer overflow vulnerability in the Fireware OS certd p ...)
 	NOT-FOR-US: WatchGuard
 CVE-2026-87897 (A SSRF vulnerability found that enables access to internal Chrome Devt ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Whiteboard Application
 CVE-2026-87086 (Tanium addressed a denial of service vulnerability in Provision.)
 	NOT-FOR-US: Tanium
 CVE-2026-87085 (Tanium addressed a SQL injection vulnerability in Provision.)
@@ -117,11 +117,11 @@ CVE-2026-86574 (Heap-based Buffer Overflow Vulnerability in JP1/Base.  This issu
 CVE-2026-85299 (A Missing Authorization vulnerability in the disks.createSnapshot and  ...)
 	NOT-FOR-US: Google Compute Engine
 CVE-2026-82986 (The user in a group can bypass the group restriction set by an adminis ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Tables
 CVE-2026-82984 (When a team was configured as "visible to everyone", the web UI correc ...)
-	TODO: check
+	- nextcloud-server <itp> (bug #941708)
 CVE-2026-82983 (The Tables app's share-listing endpoint (GET /apps/tables/share/table/ ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Tables
 CVE-2026-82332 (An improper authentication vulnerability in WatchGuard Fireware OS's A ...)
 	NOT-FOR-US: WatchGuard
 CVE-2026-82122 (Stack-based Buffer Overflow Vulnerability in HiRDB.   This issue affec ...)
@@ -141,13 +141,13 @@ CVE-2026-82116 (Missing Authentication for Critical Function Vulnerability in Hi
 CVE-2026-78845 (Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart L ...)
 	NOT-FOR-US: Aidot
 CVE-2026-77173 (A user could create a docx or odt file with a # in the filename with c ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Files Confidential
 CVE-2026-77172 (App passwords were allowed to bypass password confirmation on sensitiv ...)
-	TODO: check
+	- nextcloud-server <itp> (bug #941708)
 CVE-2026-77171 (A public shared collective always allowed recipients of the link to cr ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Collectives
 CVE-2026-77167 (Abusing the federated share endpoint, an attacker can write arbitrary  ...)
-	TODO: check
+	- nextcloud-server <itp> (bug #941708)
 CVE-2026-76939 (Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Manageme ...)
 	NOT-FOR-US: Hitachi
 CVE-2026-76938 (Authentication Bypass Vulnerability in JP1/Automatic Job Management Sy ...)
@@ -167,7 +167,7 @@ CVE-2026-76932 (Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job M
 CVE-2026-68866 (PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7 ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-67400 (A missing token type check allowed to retrieve more additional informa ...)
-	TODO: check
+	NOT-FOR-US: Nextcloud Richdocuments
 CVE-2026-65220 (A logic flaw in the BMC IPMI implementation may allow an attacker to s ...)
 	NOT-FOR-US: Supermicro
 CVE-2026-65219 (A flaw in the BMC RAKP+ implementation may allow an attacker to send a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5572e5b99a30bfab0acd3e95e6e6e324dd225320

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5572e5b99a30bfab0acd3e95e6e6e324dd225320
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/daadab2a/attachment.htm>