[Git][security-tracker-team/security-tracker][master] Process some NFUs
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Sep 16 21:54:31 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
59718e41 by Salvatore Bonaccorso at 2026-09-16T22:45:16+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,21 +13,21 @@ CVE-2026-92716 (Shuffle through 2.2.1 contains a cross-tenant privilege escalati
CVE-2026-92627 (A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H ...)
TODO: check
CVE-2026-92626 (Control iD iDSecure versions prior to4.8.3.0 are affected by an unauth ...)
- TODO: check
+ NOT-FOR-US: Control iD iDSecure
CVE-2026-92625 (Control iD iDSecure versions prior to4.8.3.0 are affected by an unauth ...)
- TODO: check
+ NOT-FOR-US: Control iD iDSecure
CVE-2026-92616 (FileRise before version 3.28.0 contains a privilege escalation vulnera ...)
- TODO: check
+ NOT-FOR-US: FileRise
CVE-2026-92615 (A flaw was found in flightctl. The configureRepoHTTPSClient() function ...)
TODO: check
CVE-2026-92605 (IRIS through 2.4.29 fails to properly validate case authorization in c ...)
- TODO: check
+ NOT-FOR-US: IRIS
CVE-2026-92604 (Scirius through 3.8.0 contains an arbitrary file write vulnerability i ...)
- TODO: check
+ NOT-FOR-US: Scirius
CVE-2026-92603 (ContiNew Admin through 4.1.0 contains an authorization bypass vulnerab ...)
- TODO: check
+ NOT-FOR-US: ContiNew Admin
CVE-2026-92602 (TDuck survey form through version 5.3 fails to validate webhook URLs o ...)
- TODO: check
+ NOT-FOR-US: TDuck survey
CVE-2026-92601 (Guns through 8.3.5 contains an improper access control vulnerability i ...)
TODO: check
CVE-2026-92600 (Guns through 8.3.5 contains an information disclosure vulnerability in ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59718e41927afc4dfd2888ca182f55d44070ee81
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/59718e41927afc4dfd2888ca182f55d44070ee81
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260916/a333b0fb/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list