An issue in MongoDB Server could allow an authenticated user with direct network access to a...
CVE-2026-18709
An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit
今日共收录 1910 条安全情报,包含 1065 个 CVE,437 篇安全通告,以及 97 篇研究论文。
← 返回归档列表CVE-2026-18709
An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit
CVE-2026-18705
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view
CVE-2026-18708
An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to caus
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only
CVE-2026-18707
An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the se
CVE-2026-18698
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag
CVE-2026-18700
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an i
CVE-2026-18699
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the ser
CVE-2026-18701
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server
CVE-2026-18702
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnost
CVE-2026-18703
An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authe
CVE-2026-18704
An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perfor
CVE-2026-18691
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influenc
CVE-2026-18696
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to
CVE-2026-18695
An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could
CVE-2026-18692
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privil
CVE-2026-18694
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to caus
CVE-2026-18693
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges
CVE-2026-18690
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag
CVE-2026-18688
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory