Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
71458c7d by security tracker role at 2026-08-14T19:15:26+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,9 +1,9 @@
CVE-2026-73850 (Emlog is an open source website building system. In 2.6.20 and
earlier ...)
- TODO: check
+ NOT-FOR-US: Emlog
CVE-2026-73849 (Emlog is an open source website building system. In 2.6.26 and
earlier ...)
- TODO: check
+ NOT-FOR-US: Emlog
CVE-2026-73847 (Emlog is an open source website building system. In 2.6.26 and
earlier ...)
- TODO: check
+ NOT-FOR-US: Emlog
CVE-2026-73846 (CKAN MCP Server is a tool for querying CKAN open data portals.
Prior t ...)
TODO: check
CVE-2026-73845 (CKAN MCP Server is a tool for querying CKAN open data portals.
Prior t ...)
@@ -15,17 +15,17 @@ CVE-2026-73673 (Netis NC63 router firmware V3.0.0.3327
contains an unauthenticat
CVE-2026-73633 (Uncontrolled resource consumption vulnerability in the JSON
plugin of ...)
TODO: check
CVE-2026-73630 (SiYuan before v3.7.4 contains an information disclosure
vulnerability ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-73107
REJECTED
CVE-2026-73051 (actix-http versions before 3.12.1 contain an HTTP request
smuggling vu ...)
TODO: check
CVE-2026-73049 (SiYuan versions before v3.7.4 contain an information
disclosure vulner ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-73048 (SiYuan versions before v3.7.4 contain an information
disclosure vulner ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-72970 (Heap-based buffer overflow in Microsoft Edge (Chromium-based)
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-72859 (Budibase versions 3.39.4 before 3.40.0 contain an
authorization regres ...)
TODO: check
CVE-2026-72838 (FileBrowser versions before 2.63.19 fail to enforce the
declared Uploa ...)
@@ -79,25 +79,25 @@ CVE-2026-72814 (The actix-files crate (actix_files) before
version 0.6.10 contai
CVE-2026-72813 (actix-files before 0.6.10 contains a denial of service
vulnerability t ...)
TODO: check
CVE-2026-72812 (SiYuan versions before v3.7.4 contain a missing authorization
vulnerab ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-72811 (SiYuan versions <= v3.7.2 contain a SQL injection
vulnerability in the ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-72810 (SiYuan versions before v3.7.4 contain a publish-boundary
bypass vulner ...)
- TODO: check
+ NOT-FOR-US: SiYuan
CVE-2026-69101 (Datavane TIS v5.0.0 contains an XML external entity (XXE)
injection vu ...)
TODO: check
CVE-2026-66272 (Dell Wyse Management Suite (WMS), versions prior to 2605.0.2,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-66271 (Dell Wyse Management Suite (WMS), versions prior to 2605.0.2,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-66270 (Dell Wyse Management Suite (WMS), versions prior to 2605.0.2,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-63702 (Dell Wyse Management Suite (WMS), versions prior to 2605.0.2,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-63701 (Dell Wyse Management Suite (WMS), versions prior to 2605.0.2,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-63700 (Dell Wyse Management Suite (WMS), versions prior to 2605.0.2,
contain ...)
- TODO: check
+ NOT-FOR-US: Dell / EMC
CVE-2026-63361 (LimeSurvey Community Edition 7.0.5 contains an authenticated
reflected ...)
TODO: check
CVE-2026-57472 (Nozomi Networks Labs identified a CWE-22: Improper Limitation
of a Pat ...)
@@ -131,7 +131,7 @@ CVE-2026-46380 (compliance-trestle is a tooling platform
for managing compliance
CVE-2026-1621 (Authentication bypass by primary weakness vulnerability in
Universal S ...)
TODO: check
CVE-2026-19884 (In Eclipse Theia versions up to and including 1.69.0, opening
a folder ...)
- TODO: check
+ NOT-FOR-US: Eclipse
CVE-2026-19880 (Path-traversal vulnerability in QOS.CH Sarl Logback-classic on
Java (l ...)
TODO: check
CVE-2026-19879 (A flaw was found in Undertow, an HTTP server, within its HTTP
response ...)
@@ -141,17 +141,17 @@ CVE-2026-19871 (Use of Hard-coded Credentials in the
human resources component i
CVE-2026-19870 (Authorization Bypass Through User-Controlled Key in the
payroll module ...)
TODO: check
CVE-2026-19847 (A security flaw has been discovered in TOTOLINK A800R
4.1.2cu.5137_B20 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19846 (A vulnerability was identified in TOTOLINK A800R
4.1.2cu.5137_B2020073 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19845 (A vulnerability was determined in TOTOLINK A800R
4.1.2cu.5137_B2020073 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19844 (A vulnerability was found in TOTOLINK A800R
4.1.2cu.5137_B20200730. Th ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19841 (A flaw has been found in TRENDNET TEW-813DRU 1.01b01. Impacted
is an u ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-19839 (A vulnerability was detected in SourceCodester Simple Doctors
Appointm ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-19838 (A security vulnerability has been detected in Webkul Bagisto
up to 2.4 ...)
TODO: check
CVE-2026-19837 (A weakness has been identified in Webkul Bagisto up to 2.4.4.
This aff ...)
@@ -163,7 +163,7 @@ CVE-2026-19835 (A vulnerability was identified in Webkul
Bagisto up to 2.4.4. Af
CVE-2026-19834 (A vulnerability was determined in Webkul Bagisto up to 2.4.4.
Affected ...)
TODO: check
CVE-2026-19830 (A vulnerability was found in TRENDnet TEW-816DRM
GURNC4.OT182B-C-TN-R1 ...)
- TODO: check
+ NOT-FOR-US: TRENDnet
CVE-2026-19829 (A security flaw has been discovered in 648540858
wvp-GB28181-pro 2.7.4 ...)
TODO: check
CVE-2026-19828 (A vulnerability was identified in 648540858 wvp-GB28181-pro
2.7.4-2026 ...)
@@ -173,49 +173,49 @@ CVE-2026-19827 (A flaw has been found in alldatacenter
alldata up to 0.6.8. This
CVE-2026-19826 (A vulnerability was detected in alldatacenter alldata up to
0.6.8. Thi ...)
TODO: check
CVE-2026-19825 (A security vulnerability has been detected in SourceCodester
Simple Cl ...)
- TODO: check
+ NOT-FOR-US: SourceCodester
CVE-2026-19824 (A weakness has been identified in Tenda W20E
15.11.0.6(1068_1546_841)_ ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2026-19823 (A security flaw has been discovered in Tenda W20E
15.11.0.6(1068_1546_ ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2026-19822 (A vulnerability was identified in Tenda W20E
15.11.0.6(1068_1546_841)_ ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2026-19821 (A vulnerability was determined in Tenda AC12
15.03.06.23_multi_TD01. T ...)
- TODO: check
+ NOT-FOR-US: Tenda
CVE-2026-19815 (A flaw has been found in TOTOLINK A800R
4.1.2cu.5137_B20200730. Affect ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19814 (A vulnerability was detected in TOTOLINK A800R
4.1.2cu.5137_B20200730. ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19813 (A security vulnerability has been detected in TOTOLINK A800R
4.1.2cu.5 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19812 (A weakness has been identified in TOTOLINK A800R
4.1.2cu.5137_B2020073 ...)
- TODO: check
+ NOT-FOR-US: TOTOLINK
CVE-2026-19794 (The WP-Stats plugin for WordPress is vulnerable to Stored
Cross-Site S ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-19768 (Improper control of generation of code ('Code Injection') in
the setti ...)
- TODO: check
+ NOT-FOR-US: Devolutions
CVE-2026-19682 (A command injection vulnerability exists in Security Center
where a re ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19681 (An authenticated command injection vulnerability exists in
Security Ce ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19680 (A SQL injection vulnerability exists in Security Center that
could all ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19679 (An input validation vulnerability exists in Security Center's
file upl ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19639 (An improper access control vulnerability exists where an
authenticated ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19636 (An issue was identified in which CSRF tokens were generated
using a pr ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19635 (A local privilege escalation vulnerability exists in Security
Center. ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19631 (A SQL injection vulnerability exists in Security Center that
could all ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19629 (A privilege escalation vulnerability exists in Tenable
Security Center ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19628 (A command injection vulnerability exists in Tenable Security
Center. A ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19626 (A remote code execution vulnerability exists in Tenable
Security Cente ...)
- TODO: check
+ NOT-FOR-US: Tenable
CVE-2026-19188 (A critical OS command injection vulnerability has been
identified in t ...)
TODO: check
CVE-2026-18403 (LimeSurvey Community Edition 7.0.5 contains an authenticated
SQL injec ...)
@@ -231,13 +231,13 @@ CVE-2026-13196 (Nozomi Networks Labs identified a
CWE-787: Out-of-bounds Write v
CVE-2026-13002 (A flow has been identified into dnssec.c library, causing an
infinite ...)
TODO: check
CVE-2026-12366 (Zephyr's dynamic kernel-object disposal path unref_check() in
kernel/u ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-12365 (A use-after-free exists in the Zephyr second-generation work
queue (ke ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-12364 (The user-space system-call verifier
z_vrfy_z_log_msg_static_create() i ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2026-12363 (The LoRaWAN Fragmented Data Block Transport service
(subsys/lorawan/se ...)
- TODO: check
+ NOT-FOR-US: Zephyr, different from src:zephyr
CVE-2025-7639 (The vulnerability, if exploited, could allow an authenticated
miscrean ...)
TODO: check
CVE-2025-71405 (chi versions before v5.2.2 contain an open redirect
vulnerability in t ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71458c7d1dfed87ccccb6976e4c559203541f354
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/71458c7d1dfed87ccccb6976e4c559203541f354
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
