[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 28 19:16:37 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ce1a1720 by security tracker role at 2026-10-28T19:16:30+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,115 +1,115 @@
CVE-2026-92797 (The MemberPress plugin for WordPress is vulnerable to Cross-Site Reque ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92665 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90724 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90723 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90721 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90720 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90719 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-90717 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-88967 (A user with query access to an Azure Monitor data source in Grafana ca ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-88858 (A user with the Viewer role in Grafana can crash the server by submitt ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-87880 (Sensitive information disclosure due to missing SSL certificate verifi ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87879 (Sensitive information disclosure due to improper token validation. The ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87878 (Linux binaries have executable stack attribute enabled. The following ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87103 (Sensitive information disclosure and manipulation due to improper toke ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87102 (Sensitive information disclosure and manipulation due to improper toke ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87101 (Sensitive information disclosure due to improper token validation. The ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87100 (Protection mechanism failure due to missing binary hardening in Linux ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87099 (Cross-site scripting (XSS) vulnerability due to improper input validat ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87098 (Sensitive information disclosure due to improper authorization. The fo ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-87097 (Sensitive information disclosure due to insufficiently protected crede ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-86401 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86400 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86399 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86398 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86397 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86396 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86395 (Dell PowerProtect Data Domain Virtual Edition, Feature Release version ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86394 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86393 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86392 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86391 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86390 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86389 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86388 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86386 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86385 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86384 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86383 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86380 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86379 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86378 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-86377 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-85655 (The Enable Media Replace plugin for WordPress is vulnerable to authori ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84725 (when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attack ...)
TODO: check
CVE-2026-83525 (Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apach ...)
TODO: check
CVE-2026-82962 (ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepen ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-82961 (The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not vali ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-81472 (Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-79656 (A user with read access to Grafana's server logs, or to a log store th ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-6064 (Link following vulnerability in Data Shredder components in Norton Ant ...)
TODO: check
CVE-2026-67187 (Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete ...)
TODO: check
CVE-2026-67080 (HCL BigFix AEX is affected by an Information Disclosure vulnerability ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67079 (HCL BigFix AEX is affected by a Clickjacking vulnerability, which coul ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67077 (HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerabil ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67074 (HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-67073 (HCL BigFix AEX is affected by an Unrestricted File Upload and Improper ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-59979 (YosemiteCrew provides organization-based service and task management. ...)
TODO: check
CVE-2026-59959 (SAIL is a cross-platform library for loading and saving images with su ...)
@@ -145,9 +145,9 @@ CVE-2026-50539 (Xibo is an open source digital signage platform with a web conte
CVE-2026-47235 (SimulationCraft is a tool to explore combat mechanics in World of Warc ...)
TODO: check
CVE-2026-44179 (XWiki Remote Macros provides XWiki rendering macros that are useful wh ...)
- TODO: check
+ NOT-FOR-US: XWiki
CVE-2026-21830 (HCL BigFix AEX product is affected by a vulnerability in the aws-sdk p ...)
- TODO: check
+ NOT-FOR-US: HCL
CVE-2026-16020 (Improper neutralization of input during web page generation ('cross-si ...)
TODO: check
CVE-2026-14571 (A Blind SQL Injection vulnerability in Futurum Software\u2019s managem ...)
@@ -167,39 +167,39 @@ CVE-2026-118683 (MONAI from 1.2.0 before 1.6.1 contains a remote code execution
CVE-2026-118681 (go-chi chi before 5.5.0 contains an authentication bypass in middlewar ...)
TODO: check
CVE-2026-118680 (SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT devic ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-118679 (n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118678 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollut ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118677 (n8n before 2.41.4 and 2.42.x before 2.42.1 contains a missing confirma ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118676 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypa ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118675 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard by ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118649 (n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied w ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118648 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118647 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118646 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118645 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118644 (n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118643 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 store ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118642 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypa ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118641 (n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118640 (n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypa ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-118633 (A path traversal vulnerability allows a remote unauthenticated attacke ...)
- TODO: check
+ NOT-FOR-US: Sophos
CVE-2026-118619 (Ultralytics Google Drive Download Path Traversal Remote Code Execution ...)
TODO: check
CVE-2026-118618 (Ultralytics parse_model Code Injection Remote Code Execution Vulnerabi ...)
@@ -295,19 +295,19 @@ CVE-2026-118243 (Highcharts JS is a JavaScript charting library based on SVG. Fr
CVE-2026-118242 (Highcharts JS is a JavaScript charting library based on SVG. From 2.3. ...)
TODO: check
CVE-2026-118040 (In Progress\xae Telerik\xae Document Processing Libraries prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118039 (In Progress\xae Telerik\xae Document Processing Libraries prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118038 (In Progress\xae Telerik\xae Document Processing Libraries prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118037 (In Progress\xae Telerik\xae Document Processing Libraries prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118036 (In Progress\xae Telerik\xae Document Processing Libraries prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118035 (In Progress\xae Telerik\xae Document Processing Libraries prior to ver ...)
- TODO: check
+ NOT-FOR-US: Progress Software
CVE-2026-118029 (Unverified ownership of the default query result location in the Athen ...)
- TODO: check
+ NOT-FOR-US: Amazon
CVE-2026-117858
REJECTED
CVE-2026-117857
@@ -643,37 +643,37 @@ CVE-2026-117693
CVE-2026-117692
REJECTED
CVE-2026-117626 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifi ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117625 (A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 a ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117624 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistent ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117623 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117622 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to se ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117621 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the age ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117620 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers wi ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117619 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests aut ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117618 (In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoi ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117617 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117616 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP en ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117615 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic li ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117614 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117613 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict i ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-117612 (Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its ...)
- TODO: check
+ NOT-FOR-US: Jenkins (core or plugin)
CVE-2026-116855 (Missing Authorization vulnerability in wphocus My auctions allegro my- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116797 (Highcharts JS is a JavaScript charting library based on SVG. From 2.0. ...)
TODO: check
CVE-2026-116796 (Highcharts JS is a JavaScript charting library based on SVG. From 10.3 ...)
@@ -689,53 +689,53 @@ CVE-2026-116776 (USB Test is a lightweight Windows CLI utility for verifying sec
CVE-2026-116593 (Apache Kafka Connect has the /connector-plugins/{connector-type}/confi ...)
TODO: check
CVE-2026-116404 (Missing Authorization vulnerability in David Anderson Redux Framework ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116393 (Missing Authorization vulnerability in iHomefinder, Inc. Optima Expres ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116392 (Deserialization of Untrusted Data vulnerability in PickPlugins Accordi ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116391 (Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116390 (Deserialization of Untrusted Data vulnerability in stepasyuk Filter Ev ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116389 (Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Me ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-116078 (Allocation of Resources Without Limits or Throttling vulnerability in ...)
TODO: check
CVE-2026-115968 (Deserialization of Untrusted Data vulnerability in Ultimate Member Ult ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115957 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115904 (Topluyo is a social networking platform. A vulnerability exists in Top ...)
TODO: check
CVE-2026-115644 (Apache Kafka Connect contains an authentication bypass vulnerability a ...)
TODO: check
CVE-2026-115612 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115609 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115607 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115606 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115603 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115596 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115593 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115591 (Insertion of Sensitive Information Into Sent Data vulnerability in Sup ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115590 (Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan- ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-115402 (OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local us ...)
TODO: check
CVE-2026-115223 (The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not pr ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-114349 (When a broker decodes a compressed record batch, the per-record decode ...)
TODO: check
CVE-2026-114278 (The che-machine-exec service constructs a shell command by concatenati ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-112375 (An authenticated Kafka principal with no authorization grants (not eve ...)
TODO: check
CVE-2026-112357 (GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), ...)
@@ -747,13 +747,13 @@ CVE-2026-112198 (XML External Entity (XXE) injection vulnerability in the SAFT i
CVE-2026-112197 (Vulnerability due to a lack of authentication in critical functions of ...)
TODO: check
CVE-2026-111850 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-111551 (Several Kafka deserialization paths read a size or count field from in ...)
TODO: check
CVE-2026-111496 (Kafka Streams derives its stream-time clock from record timestamps. Pu ...)
TODO: check
CVE-2026-111411 (Improper Neutralization of Special Elements used in an SQL Command ('S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin or theme
CVE-2026-111115 (Apache Kafka's code-generated readers for flexible protocol versions r ...)
TODO: check
CVE-2026-111108 (Apache Kafka's code-generated protocol readers pre-size an array's col ...)
@@ -765,11 +765,11 @@ CVE-2026-110985 (A Kafka broker using SASL/OAUTHBEARER with the default validato
CVE-2026-110952 (A Kafka broker that authenticates clients with SASL/OAUTHBEARER using ...)
TODO: check
CVE-2026-110541 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-110540 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-110508 (The Essential Addons for Elementor WordPress plugin before 6.8.7 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-110183 (PostgreSQL Anonymizer contains a vulnerability related to static maski ...)
TODO: check
CVE-2026-110182 (PostgreSQL Anonymizer contains a vulnerability related to the anon.par ...)
@@ -781,11 +781,11 @@ CVE-2026-106972 (An uncontrolled recursion in the MessagePack\BufferUnpacker::un
CVE-2026-106971 (An integer overflow in the MessagePack\BufferUnpacker component of ryb ...)
TODO: check
CVE-2026-106648 (The Royal Elementor Addons WordPress plugin before 1.7.1070 does not v ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-106484 (Insufficient policy enforcement in chrome-devtools-mcp in Google Chrom ...)
TODO: check
CVE-2026-106079 (An Improper Neutralization of Special Elements used in an OS Command ( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-105620 (PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a r ...)
TODO: check
CVE-2026-105619 (PostgreSQL Anonymizer doesn't mask data accessed thru a security_invok ...)
@@ -809,59 +809,59 @@ CVE-2026-105457 (Improper Limitation of a Pathname to a Restricted Directory ('P
CVE-2026-105420 (Wing FTP Server does not verify user's base folder. An attacker with a ...)
TODO: check
CVE-2026-103799 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103792 (Dell PowerProtect Data Domain Management Center, Feature Release versi ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103780 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103779 (Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 throug ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-103506 (An authenticated user in Grafana can read SSO client secrets and modif ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2026-103411 (An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Ne ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103410 (An Integer Overflow vulnerability in the DPI certificate scanner in Ju ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103409 (A Missing authentication for critical function vulnerability in Junipe ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103408 (A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Ne ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103407 (An Improper Limitation of a Pathname to a Restricted Directory vulnera ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103406 (An Improper Neutralization of Special Elements used in an OS Command v ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103405 (An Improper Neutralization of Special Elements in Output Used by a Dow ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103404 (An Incorrect Permission Assignment for Critical Resource vulnerability ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103403 (An Improper Neutralization of Special Elements used in an OS Command ( ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103402 (An Insufficient Verification of Data Authenticity vulnerability in PCL ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103401 (An Improper Link Resolution Before File Access ('Link Following') vuln ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103400 (An Improper Neutralization of Special Elements in Output Used by a Dow ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103394 (An Improper Initialization vulnerability in the SSR software in Junipe ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103393 (An Out-of-Bounds Read vulnerability in the VRRP implementation in Juni ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103392 (An Out-of-Bounds Write vulnerability in the TCP header processing in J ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103391 (An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103390 (An Out-of-Bounds Read vulnerability in the HttpParser component in Jun ...)
- TODO: check
+ NOT-FOR-US: Juniper
CVE-2026-103330 (The Sadad QA Payment WordPress plugin through 1.28 does not correctly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-103313 (The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-102799 (Joomla Extension - icagenda.com - CSV formula injection in the registr ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-102790 (Joomla Extension - icagenda.com - Stored XSS via url-type event Custo ...)
- TODO: check
+ NOT-FOR-US: Joomla
CVE-2026-101935 (The Echo Knowledge Base \u2013 Documentation, FAQs, Chat & Smart Searc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-101274 (When pretix is used as the identity provider in a Single-Sign-On (SSO) ...)
TODO: check
CVE-2026-101273 (Some of our API endpoints allowed to create order payments referencing ...)
@@ -869,9 +869,9 @@ CVE-2026-101273 (Some of our API endpoints allowed to create order payments refe
CVE-2026-101272 (The mechanism binding files generated during a shredding process to th ...)
TODO: check
CVE-2026-100105 (A user with permission to edit contact points but not their protected ...)
- TODO: check
+ NOT-FOR-US: Grafana
CVE-2025-30414 (Local privilege escalation due to improper authentication. The followi ...)
- TODO: check
+ NOT-FOR-US: Acronis
CVE-2026-117501 (HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion vi ...)
- libhttp-body-perl <unfixed>
NOTE: https://lists.security.metacpan.org/cve-announce/msg/44711939/
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce1a1720bc9e4e78ea3251c533cb5df0362bf68c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce1a1720bc9e4e78ea3251c533cb5df0362bf68c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/c2caf73e/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list