[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Sep 11 21:06:24 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9b685777 by Salvatore Bonaccorso at 2026-09-11T22:05:57+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9160 (Improper neutralization of special elements used in a template engine ...)
- TODO: check
+ NOT-FOR-US: Arma Digital Media Inc. Website Template
CVE-2026-8304 (Missing Authorization vulnerability in TUBITAK BILGEM Software Technol ...)
TODO: check
CVE-2026-8303 (Incorrect privilege assignment vulnerability in TUBITAK BILGEM Softwar ...)
@@ -11,77 +11,77 @@ CVE-2026-89329 (A flaw was found in `multipathd`. A local attacker with access t
CVE-2026-89298 (A flaw was found in the Dynamic Client Registration service of Keycloa ...)
TODO: check
CVE-2026-89265 (MoguBlog through 6.2 contains an authorization bypass vulnerability in ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89264 (MoguBlog through 6.2 fails to validate the comment author identity in ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89263 (MoguBlog through 6.2 fails to authenticate requests to the /web/commen ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89262 (MoguBlog through 6.2 contains an authorization bypass vulnerability in ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89261 (MoguBlog through 6.2 exposes Elasticsearch index management endpoints ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89260 (MoguBlog through 6.2 contains an XML external entity injection vulnera ...)
- TODO: check
+ NOT-FOR-US: MoguBlog
CVE-2026-89259 (Hugo is a static site generator. From v0.161.0, Hugo executes Node too ...)
TODO: check
CVE-2026-89258 (Hugo is a static site generator. In versions after v0.123.0 and before ...)
TODO: check
CVE-2026-89257 (AVideo through 29.0 contains an insecure direct object reference (IDOR ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89256 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89255 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89254 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89253 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89252 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails t ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89251 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails t ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89250 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89249 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89248 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is miss ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89247 (WWBN AVideo at commit c3edcc274c389816d434acadac07ee78eaf330c1 and ear ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89246 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89245 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89244 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89243 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89242 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89241 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89240 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89239 (WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 co ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89212 (A flaw resulting in XML external entity (XXE) was found in Akana API P ...)
- TODO: check
+ NOT-FOR-US: Akana
CVE-2026-89179 (WeenyGenius, a computer lab management system by Howyar Technologies, ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89178 (WeenyGenius, a computer lab management system by Howyar Technologies, ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89177 (WeenyGenius, a computer lab management system by Howyar Technologies, ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89176 (WeenyGenius, a computer lab management system developed by Howyar Tech ...)
- TODO: check
+ NOT-FOR-US: WeenyGenius
CVE-2026-89175 (Smart Video Intercom System developed by Kingdom Communication Associa ...)
- TODO: check
+ NOT-FOR-US: Smart Video Intercom System from Kingdom Communication Associated
CVE-2026-89174 (Smart Video Intercom System developed by Kingdom Communication Associa ...)
- TODO: check
+ NOT-FOR-US: Smart Video Intercom System from Kingdom Communication Associated
CVE-2026-89173 (Smart Video Intercom System developed by Kingdom Communication Associa ...)
- TODO: check
+ NOT-FOR-US: Smart Video Intercom System from Kingdom Communication Associated
CVE-2026-89148 (AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contain ...)
- TODO: check
+ NOT-FOR-US: WWBN AVideo
CVE-2026-89147 (Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in ...)
TODO: check
CVE-2026-89146 (libp2p-rendezvous through 0.17.1 fails to validate registration TTL va ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b685777bf27b0ada8c7055748f3c4f097582727
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9b685777bf27b0ada8c7055748f3c4f097582727
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260911/28bb2bc9/attachment.htm>
More information about the debian-security-tracker-commits
mailing list