An issue in MongoDB Server's query execution engine could allow an authenticated user with read...
CVE-2026-18711
An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to
#severity:high
共收录 5387 条相关情报。
← 返回所有主题An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user...
CVE-2026-18706
An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation
OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated...
CVE-2026-69115
OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-o
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an...
CVE-2026-18712
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileg
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP...
CVE-2026-69119
Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any aut
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with...
CVE-2026-18705
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers,...
CVE-2026-69117
NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only
An issue in MongoDB Server's query subsystem could allow an authenticated user with read...
CVE-2026-18701
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server
An issue in MongoDB Server's aggregation framework could allow an authenticated user with only...
CVE-2026-18704
An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perfor
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause...
CVE-2026-18697
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) proce
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non...
CVE-2026-18696
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to
An issue in MongoDB Server's handling of certain query predicates against time-series collections...
CVE-2026-18695
An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated...
CVE-2026-18692
An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privil
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with...
CVE-2026-18694
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to caus
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user...
CVE-2026-18693
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role...
CVE-2026-18690
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action ag
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger...
CVE-2026-18688
An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly...
CVE-2026-18687
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request para
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress...
CVE-2026-15426
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v
Microsoft Security Advisory CVE-2026-62871 – .NET Elevation of Privilege Vulnerability
CVE-2026-62871
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Wind