https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:26:26.744234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-273629 EUVD-2026-273629 2026-10-02T15:26:26.747464+00:00 EUVD-2026-273629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2302 fkie_cve-2026-2302 2026-10-02T15:26:26.747497+00:00

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

 https://cve.radiocsirt.org/vuln/ghsa-68xj-h57p-gg5j GHSA-68xj-h57p-gg5j 2026-10-02T15:26:26.747526+00:00

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-2302 UBUNTU-CVE-2026-2302 2026-10-02T15:26:26.747542+00:00

Affected: Ubuntu:16.04:LTS: ruby-mongo, Ubuntu:18.04:LTS: ruby-mongo, Ubuntu:20.04:LTS: ruby-mongo, Ubuntu:22.04:LTS: ruby-mongo, Ubuntu:24.04:LTS: ruby-mongo, Ubuntu:25.10: ruby-mongo, Ubuntu:26.04:LTS: ruby-mongo

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0386 WID-SEC-W-2026-0386 — MongoDB Server, Go Driver, Ruby Driver: Mehrere Schwachstellen 2026-10-02T15:26:26.747571+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Ruby-Code auszuführen, die Autorisierung zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Auswirkungen zu verursachen.