https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:25:03.607278+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/9akk108472a9037 9AKK108472A9037 — ABB AbilityTM zenon Security Risk Due to End-of-Life MongoDB Component 2026-10-03T01:25:03.807984+00:00

ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these vulnerabilities could potentially access sensitive information, cause denial of service, or disrupt system availability.

 https://cve.radiocsirt.org/vuln/bdu:2025-16225 bdu:2025-16225 2026-10-03T01:25:03.808041+00:00 bdu:2025-16225 https://cve.radiocsirt.org/vuln/bit-mongodb-2025-14847 BIT-mongodb-2025-14847 — Zlib compressed protocol header length confusion may allow memory read 2026-10-03T01:25:03.808058+00:00

Affected: Bitnami: mongodb

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1134 certfr-2025-avi-1134 — De multiples vulnérabilités ont été découvertes dans MongoDB Server. Certaines d'entre elles permettent à un attaquant… 2026-10-03T01:25:03.808085+00:00 certfr-2025-avi-1134 https://cve.radiocsirt.org/vuln/cleanstart-2026-ap31842 Withdrawn: CLEANSTART-2026-AP31842 — Security fixes for CVE-2025-14847, CVE-2025-58181, CVE-2025-61727, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-… 2026-10-03T01:25:03.808101+00:00

Withdrawn by the publisher.

Affected: CleanStart: mongodb

Multiple security vulnerabilities affect the mongodb package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-271190 EUVD-2026-271190 2026-10-03T01:25:03.808122+00:00 EUVD-2026-271190 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14847 fkie_cve-2025-14847 2026-10-03T01:25:03.808133+00:00

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.

 https://cve.radiocsirt.org/vuln/ghsa-4742-mr57-2r9j GHSA-4742-mr57-2r9j 2026-10-03T01:25:03.808155+00:00

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.

 https://cve.radiocsirt.org/vuln/icsa-26-218-01 ICSA-26-218-01 — ABB Ability Zenon 2026-10-03T01:25:03.808172+00:00

ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these vulnerabilities could potentially access sensitive information, cause denial of service, or disrupt system availability.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14847 UBUNTU-CVE-2025-14847 2026-10-03T01:25:03.808192+00:00

Affected: Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2905 WID-SEC-W-2025-2905 — MongoDB: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T01:25:03.808214+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um Informationen offenzulegen.