https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:43:54.309860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18687 BIT-mongodb-2026-18687 — Improper Validation in MongoDB Queryable Encryption Maintenance Operation Leads to Denial of Service and Index Corrupti… 2026-10-04T12:43:54.316419+00:00

Affected: Bitnami: mongodb

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a server crash or excessive internal writes, resulting in resource exhaustion and corruption of encrypted index data.

 https://cve.radiocsirt.org/vuln/euvd-2026-351303 EUVD-2026-351303 2026-10-04T12:43:54.316471+00:00 EUVD-2026-351303 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18687 fkie_cve-2026-18687 2026-10-04T12:43:54.316487+00:00

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a server crash or excessive internal writes, resulting in resource exhaustion and corruption of encrypted index data.

 https://cve.radiocsirt.org/vuln/ghsa-q4pc-c9m4-c873 GHSA-q4pc-c9m4-c873 2026-10-04T12:43:54.316511+00:00

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a server crash or excessive internal writes, resulting in resource exhaustion and corruption of encrypted index data.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18687 UBUNTU-CVE-2026-18687 2026-10-04T12:43:54.316527+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use. An authenticated user with readWrite privileges could submit a specially formed request that leads to a server crash or excessive internal writes, resulting in resource exhaustion and corruption of encrypted index data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 WID-SEC-W-2026-2794 — MongoDB: Mehrere Schwachstellen 2026-10-04T12:43:54.316551+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.