https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:00:38.969855+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18703 BIT-mongodb-2026-18703 — Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication M… 2026-10-04T13:00:39.045753+00:00

Affected: Bitnami: mongodb

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

 https://cve.radiocsirt.org/vuln/euvd-2026-351306 EUVD-2026-351306 2026-10-04T13:00:39.045810+00:00 EUVD-2026-351306 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18703 fkie_cve-2026-18703 2026-10-04T13:00:39.045827+00:00

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

 https://cve.radiocsirt.org/vuln/ghsa-h22h-g2cf-r8hr GHSA-h22h-g2cf-r8hr 2026-10-04T13:00:39.045851+00:00

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18703 UBUNTU-CVE-2026-18703 2026-10-04T13:00:39.045867+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 WID-SEC-W-2026-2794 — MongoDB: Mehrere Schwachstellen 2026-10-04T13:00:39.045891+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.