https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:43:24.829254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0166 certfr-2025-avi-0166 — De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer une élévatio… 2026-10-03T22:43:24.857972+00:00 certfr-2025-avi-0166 https://cve.radiocsirt.org/vuln/euvd-2026-219422 EUVD-2026-219422 2026-10-03T22:43:24.858001+00:00 EUVD-2026-219422 https://cve.radiocsirt.org/vuln/fkie_cve-2025-1692 fkie_cve-2025-1692 2026-10-03T22:43:24.858016+00:00

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9

 https://cve.radiocsirt.org/vuln/ghsa-973h-3x6p-qg37 GHSA-973h-3x6p-qg37 — MongoDB Shell may be susceptible to control character injection via pasting 2026-10-03T22:43:24.858043+00:00

Affected: npm: mongosh

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0454 WID-SEC-W-2025-0454 — MongoDB und MongoDB Compass: Mehrere Schwachstellen 2026-10-03T22:43:24.858068+00:00

Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in MongoDB und MongoDB Compass ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren und erhöhte Rechte zu erlangen.