https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:59:26.403701+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18688 BIT-mongodb-2026-18688 — Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosure 2026-10-04T17:59:26.469274+00:00

Affected: Bitnami: mongodb

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

 https://cve.radiocsirt.org/vuln/euvd-2026-351302 EUVD-2026-351302 2026-10-04T17:59:26.469330+00:00 EUVD-2026-351302 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18688 fkie_cve-2026-18688 2026-10-04T17:59:26.469346+00:00

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

 https://cve.radiocsirt.org/vuln/ghsa-rf6p-955q-5j7w GHSA-rf6p-955q-5j7w 2026-10-04T17:59:26.469371+00:00

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18688 UBUNTU-CVE-2026-18688 2026-10-04T17:59:26.469387+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 WID-SEC-W-2026-2794 — MongoDB: Mehrere Schwachstellen 2026-10-04T17:59:26.469412+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.