Most recent entries from all

BIT-mongodb-2026-4148 — ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators

2026-10-03T05:16:13.793146+00:00

Affected: Bitnami: mongodb

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

certfr-2026-avi-0736 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq…

2026-10-03T05:16:13.793207+00:00

certfr-2026-avi-0736

EUVD-2026-276415

2026-10-03T05:16:13.793230+00:00

EUVD-2026-276415

fkie_cve-2026-4148

2026-10-03T05:16:13.793243+00:00

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

GHSA-5rch-679r-cv33

2026-10-03T05:16:13.793266+00:00

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

UBUNTU-CVE-2026-4148

2026-10-03T05:16:13.793281+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

WID-SEC-W-2026-0773 — MongoDB: Mehrere Schwachstellen

2026-10-03T05:16:13.793304+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Informationen offenzulegen, und um beliebigen Programmcode auszuführen.