https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:05:02.057283+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11726 bdu:2025-11726 2026-10-04T04:05:02.189806+00:00 bdu:2025-11726 https://cve.radiocsirt.org/vuln/bit-mongodb-2025-6713 BIT-mongodb-2025-6713 — MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage 2026-10-04T04:05:02.189846+00:00

Affected: Bitnami: mongodb

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB Server v8.0 versions prior to 8.0.7, MongoDB Server v7.0 versions prior to 7.0.19 and MongoDB Server v6.0 versions prior to 6.0.22

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0570 certfr-2025-avi-0570 — De multiples vulnérabilités ont été découvertes dans MongoDB. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-04T04:05:02.189883+00:00 certfr-2025-avi-0570 https://cve.radiocsirt.org/vuln/cnvd-2025-15515 cnvd-2025-15515 2026-10-04T04:05:02.189901+00:00 cnvd-2025-15515 https://cve.radiocsirt.org/vuln/euvd-2026-247827 EUVD-2026-247827 2026-10-04T04:05:02.189914+00:00 EUVD-2026-247827 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6713 fkie_cve-2025-6713 2026-10-04T04:05:02.189925+00:00

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB Server v8.0 versions prior to 8.0.7, MongoDB Server v7.0 versions prior to 7.0.19 and MongoDB Server v6.0 versions prior to 6.0.22

 https://cve.radiocsirt.org/vuln/ghsa-p3jv-2cpc-349v GHSA-p3jv-2cpc-349v 2026-10-04T04:05:02.189979+00:00

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB Server v8.0 versions prior to 8.0.7, MongoDB Server v7.0 versions prior to 7.0.20 and MongoDB Server v6.0 versions prior to 6.0.22

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6713 UBUNTU-CVE-2025-6713 2026-10-04T04:05:02.190012+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB Server v8.0 versions prior to 8.0.7, MongoDB Server v7.0 versions prior to 7.0.19 and MongoDB Server v6.0 versions prior to 6.0.22

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1482 WID-SEC-W-2025-1482 — MongoDB: Mehrere Schwachstellen 2026-10-04T04:05:02.190054+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.