[Git][security-tracker-team/security-tracker][master] Process some NFUs

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Sep 28 10:41:32 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a9b96339 by Salvatore Bonaccorso at 2026-09-28T11:40:45+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,83 +11,83 @@ CVE-2026-89300 (The WP Verify API WordPress plugin through 1.0.0 does not have a
 CVE-2026-88828 (The Blacklist Manager for WooCommerce WordPress plugin from 1.3.0 to 2 ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-87723 (In Google fuse-archive versions prior to 1.24, an attacker who can pre ...)
-	TODO: check
+	NOT-FOR-US: Google fuse-archive
 CVE-2026-86838 (The Bookly WordPress plugin before 28.3 does not validate client-suppl ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-84744 (The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remov ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-101090 (Nezha 2.2.3 contains a Host header injection regression in the OAuth2  ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-101089 (Nezha before 2.2.7 contains an information disclosure vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-101088 (Nezha is a server and website monitoring tool. In versions >= 2.2.11 a ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-101087 (Nezha versions 2.0.10 through 2.3.2 use a restricted HTTP client to va ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-101086 (Nezha Dashboard versions before 2.3.5 fail to restrict service monitor ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-101085 (Nezha before 2.3.8 fails to validate alert rule type and duration boun ...)
-	TODO: check
+	NOT-FOR-US: Nezha
 CVE-2026-101084 (obot versions before v0.21.1 fail to enforce Access Control Rules on t ...)
-	TODO: check
+	NOT-FOR-US: obot
 CVE-2026-101065 (Obot is an open-source AI agent/MCP platform. In all versions up to an ...)
-	TODO: check
+	NOT-FOR-US: obot
 CVE-2026-101064 (Obot before v0.23.0 contains a server-side request forgery vulnerabili ...)
-	TODO: check
+	NOT-FOR-US: obot
 CVE-2026-101063 (Obot versions before v0.23.0 fail to enforce authentication on MCP Reg ...)
-	TODO: check
+	NOT-FOR-US: obot
 CVE-2026-101062 (Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_S ...)
-	TODO: check
+	NOT-FOR-US: obot
 CVE-2026-101007 (A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This iss ...)
-	TODO: check
+	NOT-FOR-US: aaPanel BaoTa
 CVE-2026-101006 (A flaw has been found in Frappe HR up to 16.15.0. This vulnerability a ...)
-	TODO: check
+	NOT-FOR-US: Frappe HR
 CVE-2026-101005 (A vulnerability was detected in October CMS up to 4.3.4. This affects  ...)
-	TODO: check
+	NOT-FOR-US: October CMS
 CVE-2026-101004 (A security vulnerability has been detected in notionnext-org NotionNex ...)
-	TODO: check
+	NOT-FOR-US: notionnext-org NotionNext
 CVE-2026-101003 (A weakness has been identified in Cesanta Mongoose up to 7.21. Affecte ...)
 	TODO: check
 CVE-2026-101002 (A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071 ...)
-	TODO: check
+	NOT-FOR-US: Netcore
 CVE-2026-101001 (A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246.  ...)
-	TODO: check
+	NOT-FOR-US: Netcore
 CVE-2026-101000 (A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928.  ...)
-	TODO: check
+	NOT-FOR-US: Netcore
 CVE-2026-100909 (A vulnerability was found in OctoberCMS up to 4.1.19/4.2.25/4.3.4. The ...)
-	TODO: check
+	NOT-FOR-US: October CMS
 CVE-2026-100908 (A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an ...)
-	TODO: check
+	NOT-FOR-US: Eyeplus
 CVE-2026-100907 (A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is  ...)
-	TODO: check
+	NOT-FOR-US: Eyeplus
 CVE-2026-100906 (A vulnerability was detected in Eyeplus 57.0.0.0308. The affected elem ...)
-	TODO: check
+	NOT-FOR-US: Eyeplus
 CVE-2026-100904 (A security vulnerability has been detected in amirsanni mini-inventory ...)
-	TODO: check
+	NOT-FOR-US: amirsanni mini-inventory-and-sales-management-system
 CVE-2026-100903 (A vulnerability was identified in \u041e\u041e\u041e \u041d\u041f\u041 ...)
-	TODO: check
+	NOT-FOR-US: GEOritm
 CVE-2026-100902 (A vulnerability was determined in Barco ClickShare CX-20 Gen2 up to 02 ...)
-	TODO: check
+	NOT-FOR-US: Barco ClickShare CX-20 Gen2
 CVE-2026-100901 (A vulnerability was found in athlon1600 youtube-downloader up to 4.0.1 ...)
-	TODO: check
+	NOT-FOR-US: athlon1600 youtube-downloader
 CVE-2026-100900 (A vulnerability has been found in DevaslanPHP project-management 1.2.1 ...)
-	TODO: check
+	NOT-FOR-US: DevaslanPHP project-management
 CVE-2026-100899 (A flaw has been found in DevaslanPHP project-management 1.2.1/1.2.2/1. ...)
-	TODO: check
+	NOT-FOR-US: DevaslanPHP project-management
 CVE-2026-100898 (A vulnerability was detected in DevaslanPHP project-management 1.2.1/1 ...)
-	TODO: check
+	NOT-FOR-US: DevaslanPHP project-management
 CVE-2026-100897 (A security vulnerability has been detected in fuzui StudentInfo up to  ...)
-	TODO: check
+	NOT-FOR-US: fuzui StudentInfo
 CVE-2026-100896 (A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2026-100895 (A security flaw has been discovered in Trusted Domain Project OpenARC  ...)
 	TODO: check
 CVE-2026-100894 (A vulnerability was identified in mathurvishal CloudClassroom-PHP-Proj ...)
-	TODO: check
+	NOT-FOR-US: mathurvishal CloudClassroom-PHP-Project
 CVE-2026-100893 (A vulnerability was determined in Privoce VoceChat Server up to 0.5.36 ...)
-	TODO: check
+	NOT-FOR-US: Privoce VoceChat Server
 CVE-2026-100892 (A vulnerability was found in aligungr UERANSIM up to 3.3.0. This affec ...)
-	TODO: check
+	NOT-FOR-US: aligungr UERANSIM
 CVE-2026-100891 (A vulnerability has been found in Trusted Domain Project OpenDMARC up  ...)
 	TODO: check
 CVE-2026-100890 (A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a9b96339bfa66d0102a9a17aa878c2c2624686df

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a9b96339bfa66d0102a9a17aa878c2c2624686df
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/c67f87b9/attachment.htm>

More information about the debian-security-tracker-commits mailing list