https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:22:18.067928+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18697 BIT-mongodb-2026-18697 — Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos 2026-10-04T10:22:18.073280+00:00

Affected: Bitnami: mongodb

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the affected mongos instance.

 https://cve.radiocsirt.org/vuln/euvd-2026-351307 EUVD-2026-351307 2026-10-04T10:22:18.073373+00:00 EUVD-2026-351307 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18697 fkie_cve-2026-18697 2026-10-04T10:22:18.073405+00:00

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the affected mongos instance.

 https://cve.radiocsirt.org/vuln/ghsa-wxp5-7rcf-9m3q GHSA-wxp5-7rcf-9m3q 2026-10-04T10:22:18.073453+00:00

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the affected mongos instance.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18697 UBUNTU-CVE-2026-18697 2026-10-04T10:22:18.073489+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the affected mongos instance.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 WID-SEC-W-2026-2794 — MongoDB: Mehrere Schwachstellen 2026-10-04T10:22:18.073543+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.