https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:06:18.812869+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/9akk108472a9037 9AKK108472A9037 — ABB AbilityTM zenon Security Risk Due to End-of-Life MongoDB Component 2026-10-02T13:06:18.818956+00:00

ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these vulnerabilities could potentially access sensitive information, cause denial of service, or disrupt system availability.

 https://cve.radiocsirt.org/vuln/bit-mongodb-2021-20330 BIT-mongodb-2021-20330 — Specific replication command with malformed oplog entries can crash secondaries 2026-10-02T13:06:18.819009+00:00

Affected: Bitnami: mongodb

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to 4.2.16; MongoDB Server v4.4 versions prior to 4.4.9.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-962 certfr-2021-avi-962 — Une vulnérabilité a été découverte dans MongoDB. Elle permet à un attaquant de provoquer un déni de service à distance. 2026-10-02T13:06:18.819036+00:00 certfr-2021-avi-962 https://cve.radiocsirt.org/vuln/cnvd-2021-101988 cnvd-2021-101988 2026-10-02T13:06:18.819053+00:00 cnvd-2021-101988 https://cve.radiocsirt.org/vuln/euvd-2026-165873 EUVD-2026-165873 2026-10-02T13:06:18.819066+00:00 EUVD-2026-165873 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20330 fkie_cve-2021-20330 2026-10-02T13:06:18.819077+00:00

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to 4.2.16; MongoDB Server v4.4 versions prior to 4.4.9.

 https://cve.radiocsirt.org/vuln/ghsa-8jvf-jqg4-r6h2 GHSA-8jvf-jqg4-r6h2 2026-10-02T13:06:18.819097+00:00

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.25; MongoDB Server v4.2 versions prior to 4.2.14; MongoDB Server v4.4 versions prior to 4.4.6.

 https://cve.radiocsirt.org/vuln/gsd-2021-20330 gsd-2021-20330 2026-10-02T13:06:18.819111+00:00 gsd-2021-20330 https://cve.radiocsirt.org/vuln/icsa-26-218-01 ICSA-26-218-01 — ABB Ability Zenon 2026-10-02T13:06:18.819121+00:00

ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these vulnerabilities could potentially access sensitive information, cause denial of service, or disrupt system availability.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20330 Withdrawn: UBUNTU-CVE-2021-20330 2026-10-02T13:06:18.819141+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: mongodb, Ubuntu:16.04:LTS: mongodb, Ubuntu:18.04:LTS: mongodb, Ubuntu:20.04:LTS: mongodb

An attacker with basic CRUD permissions on a replicated collection can run the applyOps command with specially malformed oplog entries, resulting in a potential denial of service on secondaries. This issue affects MongoDB Server v4.0 versions prior to 4.0.27; MongoDB Server v4.2 versions prior to 4.2.16; MongoDB Server v4.4 versions prior to 4.4.9.