[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Sep 27 08:14:41 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
624445c8 by security tracker role at 2026-09-27T07:14:20+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,63 +1,63 @@
CVE-2026-97319 (The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-97227 (The NextScripts: Social Networks Auto-Poster WordPress plugin before 4 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96899 (The Optima Express IDX WordPress plugin before 8.7.6 does not properly ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96897 (The Optima Express IDX WordPress plugin before 8.7.6 does not perform ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96896 (The Malcure Malware Shield \u2014 Removal, Repair, Monitor WordPress p ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-96895 (The WP YouTube Lyte WordPress plugin before 1.7.31 does not escape som ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-94408 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94400 (Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94399 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94398 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94397 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-94396 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-92995 (The Verge3D Publishing and E-Commerce WordPress plugin through 4.13.0 ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-92436 (The Mailchimp for WooCommerce WordPress plugin before 6.3 does not req ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89006 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89003 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89001 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-89000 (The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86841 (The Online Scheduling and Appointment Booking System WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86839 (The Online Scheduling and Appointment Booking System WordPress plugin ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-86609 (The Download Manager WordPress plugin before 7.5.6 does not sanitise a ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-85002 (The EmbedPress WordPress plugin before 4.6.7 does not escape one of i ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-84069 (The WebFacing\u2122 WordPress plugin before 5.4 does not restrict acc ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82841 (The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-82300 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-82294 (Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-81655 (The Ad Inserter WordPress plugin before 2.8.19 does not correctly res ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-78582 (Missing Authorization (CWE-862) in Kibana can lead to unauthorized del ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-72668 (Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kiba ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-72662 (Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana c ...)
- TODO: check
+ NOT-FOR-US: Elastic
CVE-2026-100865 (Heym before 0.0.53 contains multiple independent vulnerabilities. (1) ...)
TODO: check
CVE-2026-100864 (heym before 0.0.91 contains a sandbox escape vulnerability in the expr ...)
@@ -127,11 +127,11 @@ CVE-2026-100833 (Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 g
CVE-2026-100746 (A vulnerability was found in coollabsio Coolify up to 4.1.0. This affe ...)
TODO: check
CVE-2026-100745 (A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted ...)
- TODO: check
+ NOT-FOR-US: Edimax
CVE-2026-100744 (A flaw has been found in coollabsio Coolify up to 4.1.2. The affected ...)
TODO: check
CVE-2026-100740 (A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is ...)
- TODO: check
+ NOT-FOR-US: D-Link
CVE-2026-100739 (A vulnerability was detected in mathurvishal CloudClassroom-PHP-Projec ...)
TODO: check
CVE-2026-100725 (http4k (Maven artifact org.http4k:http4k-core) before 6.48.0.0, 5.42.0 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/624445c8bb16dcf7fd8ea398a419cb7a9e8af3c4
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/624445c8bb16dcf7fd8ea398a419cb7a9e8af3c4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/0656be72/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list