[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e1409adb by Salvatore Bonaccorso at 2026-10-29T21:20:52+01:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -115,9 +115,9 @@ CVE-2026-80069 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a mi
 CVE-2026-80067 (MasterStudy LMS plugin for WordPress before 3.7.50 contains a path tra ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7190 (A cross-site scripting (XSS) vulnerability in the ICTBroadcast softwar ...)
-	TODO: check
+	NOT-FOR-US: ICTBroadcast software
 CVE-2026-79589 (The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an in ...)
-	TODO: check
+	NOT-FOR-US: WIFI4 N300 router (Model: T1 Pro)
 CVE-2026-77819 (IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticat ...)
 	NOT-FOR-US: IBM
 CVE-2026-77817 (IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticat ...)
@@ -235,17 +235,17 @@ CVE-2026-52709 (Improper Neutralization of Input During Web Page Generation ('Cr
 CVE-2026-52708 (Missing Authorization vulnerability in weDevs WP User Frontend wp-user ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-51912 (OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in ma ...)
-	TODO: check
+	NOT-FOR-US: OpenBMB XAgent
 CVE-2026-51905 (TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access  ...)
-	TODO: check
+	NOT-FOR-US: TransformerOptimus SuperAGI
 CVE-2026-51903 (SuperAGI v0.0.14 contains an improper access control vulnerability in  ...)
-	TODO: check
+	NOT-FOR-US: TransformerOptimus SuperAGI
 CVE-2026-51902 (SuperAGI up to v0.0.14 contains an improper access control vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: TransformerOptimus SuperAGI
 CVE-2026-51863 (DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_fi ...)
-	TODO: check
+	NOT-FOR-US: DB-GPT
 CVE-2026-51851 (modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directo ...)
-	TODO: check
+	NOT-FOR-US: modelscope agent-zero
 CVE-2026-49142 (OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerabi ...)
 	NOT-FOR-US: OpenEMR
 CVE-2026-48884 (Missing Authorization vulnerability in weDevs WP User Frontend wp-user ...)
@@ -994,7 +994,7 @@ CVE-2026-54455 (OpenCATS is an open-source applicant tracking system and recruit
 CVE-2026-54453 (OpenCATS is an open-source applicant tracking system and recruitment C ...)
 	NOT-FOR-US: OpenCATS
 CVE-2026-54162 (Ember is a real-time terminal dashboard for Caddy servers with Franken ...)
-	TODO: check
+	NOT-FOR-US: Ember
 CVE-2026-42949 (A authorization bypass vulnerability exists in the /api/runscript func ...)
 	NOT-FOR-US: FUXA
 CVE-2026-42922 (A authorization bypass vulnerability exists in the /nodered functional ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1409adb0e5210cc6dab27cbd0bc028b4577a7a0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1409adb0e5210cc6dab27cbd0bc028b4577a7a0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/956bce8d/attachment-0001.htm>