今日共收录 1422 条安全情报，包含 546 个 CVE，469 篇安全通告，以及 113 篇研究论文。
← 返回归档列表CVE-2026-13073
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafte
CVE-2026-13072
When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data du
CVE-2026-13071
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation express
CVE-2026-13070
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP respons
CVE-2026-13069
An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a c
CVE-2026-13068
An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate ac
CVE-2026-13067
When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be v
CVE-2026-13066
Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result i
CVE-2026-13065
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator
CVE-2026-13064
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in
CVE-2026-13063
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-mem
CVE-2026-13061
An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessi
CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authori
CVE-2026-13059
An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role
CVE-2026-13058
An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a craf
CVE-2026-13056
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate object
CVE-2026-13055
The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod)
CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnera
CVE-2026-16624
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on
CVE-2026-65650
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.