[Git][security-tracker-team/security-tracker][master] Process some NFUs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4e2643e8 by Salvatore Bonaccorso at 2026-09-29T08:37:58+02:00
Process some NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -177,7 +177,7 @@ CVE-2026-86102 (An OS command injection vulnerability in the WatchGuard AP inter
 CVE-2026-85134 (Unrestricted upload of file with dangerous type vulnerability in Bimse ...)
 	NOT-FOR-US: eBA Plus Document and Workflow Management System:
 CVE-2026-84894 (In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop  ...)
-	TODO: check
+	NOT-FOR-US: moxygen
 CVE-2026-82969 (Improper neutralization of input during web page generation ('cross-si ...)
 	NOT-FOR-US: eBA Plus Document and Workflow Management System:
 CVE-2026-82936 (mH-DEVELOPER smart home module is vulnerable to Denial of Service due  ...)
@@ -287,19 +287,19 @@ CVE-2026-52749 (The Kaon AR2140X router improperly issues session cookies in res
 CVE-2026-52748 (The Kaon AR2140X router contains a vulnerability where the backup func ...)
 	NOT-FOR-US: Kaon
 CVE-2026-4556 (Exam4 is affected by a local privilege escalation vulnerability in the ...)
-	TODO: check
+	NOT-FOR-US: Exam4
 CVE-2026-49994 (Bluehood monitors local bluetooth activity. Prior to version 0.7.1, wh ...)
 	NOT-FOR-US: Bluehood
 CVE-2026-48100 (Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory ...)
 	NOT-FOR-US: Payy
 CVE-2026-45562 (FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, ...)
-	TODO: check
+	NOT-FOR-US: FreePBX
 CVE-2026-19759 (An Incorrect Authorization vulnerabilityin the task configuration in G ...)
-	TODO: check
+	NOT-FOR-US: Google Cloud Application Integration
 CVE-2026-19444 (A path traversal vulnerability was discovered in the Kuberneteskubectl ...)
 	TODO: check
 CVE-2026-18825 (An Origin Validation Error in the middleware of the connect-xcors npm  ...)
-	TODO: check
+	NOT-FOR-US: connect-xcors npm package
 CVE-2026-15953 (Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ...)
 	NOT-FOR-US: ABB group
 CVE-2026-15952 (Incorrect Permission Assignment for Critical Resource vulnerability in ...)
@@ -307,7 +307,7 @@ CVE-2026-15952 (Incorrect Permission Assignment for Critical Resource vulnerabil
 CVE-2026-13018 (Insufficient validation of untrusted input in Codecs in Google Chrome  ...)
 	TODO: check
 CVE-2026-12342 (This vulnerability impacts all versions of IdentityIQ and allows an un ...)
-	TODO: check
+	NOT-FOR-US: IdentityIQ
 CVE-2026-12269 (Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepali ...)
 	NOT-FOR-US: Zoho
 CVE-2026-12268 (ManageEngine DDI Central versions below 6201 are vulnerable toPowerShe ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e2643e840ce4d46db71536ba6e162e813b86f18

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e2643e840ce4d46db71536ba6e162e813b86f18
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/f3652fd0/attachment-0001.htm>