https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:40:13.793623+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18712 BIT-mongodb-2026-18712 — Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other… 2026-10-04T08:40:13.859973+00:00

Affected: Bitnami: mongodb

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

 https://cve.radiocsirt.org/vuln/euvd-2026-351282 EUVD-2026-351282 2026-10-04T08:40:13.860036+00:00 EUVD-2026-351282 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18712 fkie_cve-2026-18712 2026-10-04T08:40:13.860053+00:00

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

 https://cve.radiocsirt.org/vuln/ghsa-jpw7-w4h8-xcfw GHSA-jpw7-w4h8-xcfw 2026-10-04T08:40:13.860078+00:00

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18712 UBUNTU-CVE-2026-18712 2026-10-04T08:40:13.860095+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 WID-SEC-W-2026-2794 — MongoDB: Mehrere Schwachstellen 2026-10-04T08:40:13.860121+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.