https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:47:00.458944+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01947 bdu:2024-01947 2026-10-03T19:47:00.571950+00:00 bdu:2024-01947 https://cve.radiocsirt.org/vuln/bit-mongodb-2024-1351 BIT-mongodb-2024-1351 — MongoDB Server may allow successful untrusted connection 2026-10-03T19:47:00.571989+00:00

Affected: Bitnami: mongodb

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failing certificate validation. This issue affects MongoDB Server v7.0 versions prior to and including 7.0.5, MongoDB Server v6.0 versions prior to and including 6.0.13, MongoDB Server v5.0 versions prior to and including 5.0.24 and MongoDB Server v4.4 versions prior to and including 4.4.28.

Required Configuration : A server process will allow incoming connections to skip peer certificate validation if the server process was started with TLS enabled (net.tls.mode set to allowTLS, preferTLS, or requireTLS) and without a net.tls.CAFile configured.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0200 certfr-2024-avi-0200 — Une vulnérabilité a été découverte dans <span class="textit">les produits MongoDB</span>. Elle permet à un attaquant de… 2026-10-03T19:47:00.572028+00:00 certfr-2024-avi-0200 https://cve.radiocsirt.org/vuln/cnvd-2024-13539 cnvd-2024-13539 2026-10-03T19:47:00.572045+00:00 cnvd-2024-13539 https://cve.radiocsirt.org/vuln/euvd-2026-217115 EUVD-2026-217115 2026-10-03T19:47:00.572057+00:00 EUVD-2026-217115 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1351 fkie_cve-2024-1351 2026-10-03T19:47:00.572068+00:00

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failing certificate validation. This issue affects MongoDB Server v7.0 versions prior to and including 7.0.5, MongoDB Server v6.0 versions prior to and including 6.0.13, MongoDB Server v5.0 versions prior to and including 5.0.24 and MongoDB Server v4.4 versions prior to and including 4.4.28.

Required Configuration : A server process will allow incoming connections to skip peer certificate validation if the server process was started with TLS enabled (net.tls.mode set to allowTLS, preferTLS, or requireTLS) and without a net.tls.CAFile configured.

 https://cve.radiocsirt.org/vuln/ghsa-825c-4w2m-h7fv GHSA-825c-4w2m-h7fv 2026-10-03T19:47:00.572094+00:00

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failing certificate validation. This issue affects MongoDB Server v7.0 versions prior to and including 7.0.5, MongoDB Server v6.0 versions prior to and including 6.0.13, MongoDB Server v5.0 versions prior to and including 5.0.24 and MongoDB Server v4.4 versions prior to and including 4.4.28.

Required Configuration : A server process will allow incoming connections to skip peer certificate validation if the server process was started with TLS enabled (net.tls.mode set to allowTLS, preferTLS, or requireTLS) and without a net.tls.CAFile configured.

 https://cve.radiocsirt.org/vuln/gsd-2024-1351 gsd-2024-1351 2026-10-03T19:47:00.572113+00:00 gsd-2024-1351 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1351 UBUNTU-CVE-2024-1351 2026-10-03T19:47:00.572123+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which may result in untrusted connections to succeed. This may effectively reduce the security guarantees provided by TLS and open connections that should have been closed due to failing certificate validation. This issue affects MongoDB Server v7.0 versions prior to and including 7.0.5, MongoDB Server v6.0 versions prior to and including 6.0.13, MongoDB Server v5.0 versions prior to and including 5.0.24 and MongoDB Server v4.4 versions prior to and including 4.4.28. Required Configuration : A server process will allow incoming connections to skip peer certificate validation if the server process was started with TLS enabled (net.tls.mode set to allowTLS, preferTLS, or requireTLS) and without a net.tls.CAFile configured.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0583 WID-SEC-W-2024-0583 — MongoDB: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T19:47:00.572150+00:00

Ein anonymer Angreifer im angrenzenden Netzbereich kann eine Schwachstelle in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen.