https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:31:48.571591+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18698 BIT-mongodb-2026-18698 — Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command 2026-10-04T09:31:48.575475+00:00

Affected: Bitnami: mongodb

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

 https://cve.radiocsirt.org/vuln/euvd-2026-351287 EUVD-2026-351287 2026-10-04T09:31:48.575524+00:00 EUVD-2026-351287 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18698 fkie_cve-2026-18698 2026-10-04T09:31:48.575540+00:00

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

 https://cve.radiocsirt.org/vuln/ghsa-vh87-wfq5-jrqm GHSA-vh87-wfq5-jrqm 2026-10-04T09:31:48.575563+00:00

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18698 UBUNTU-CVE-2026-18698 2026-10-04T09:31:48.575579+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations, unauthorized modification of system collection data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 WID-SEC-W-2026-2794 — MongoDB: Mehrere Schwachstellen 2026-10-04T09:31:48.575608+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.