https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:08:05.784889+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-13055 BIT-mongodb-2026-13055 — Server crash via aggregation pipeline expression with compound wildcard index specification 2026-10-03T13:08:05.927563+00:00

Affected: Bitnami: mongodb

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0922 certfr-2026-avi-0922 — De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer un contourne… 2026-10-03T13:08:05.927643+00:00 certfr-2026-avi-0922 https://cve.radiocsirt.org/vuln/euvd-2026-339921 EUVD-2026-339921 2026-10-03T13:08:05.927672+00:00 EUVD-2026-339921 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13055 fkie_cve-2026-13055 2026-10-03T13:08:05.927686+00:00

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://cve.radiocsirt.org/vuln/ghsa-c3m4-h7px-8423 GHSA-c3m4-h7px-8423 2026-10-03T13:08:05.927713+00:00

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-13055 UBUNTU-CVE-2026-13055 2026-10-03T13:08:05.927741+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2487 WID-SEC-W-2026-2487 — MongoDB: Mehrere Schwachstellen 2026-10-03T13:08:05.927784+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Speicherbeschädigungen herbeizuführen oder einen Denial-of-Service-Zustand zu verursachen.