https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:07:55.602904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351907 EUVD-2026-351907 2026-10-03T17:07:55.605397+00:00 EUVD-2026-351907 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73618 fkie_cve-2026-73618 2026-10-03T17:07:55.605429+00:00

Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters. Attackers with query write permission can inject JSON structural characters to alter MongoDB queries, bypassing filters to read, modify, or delete arbitrary documents.

 https://cve.radiocsirt.org/vuln/ghsa-wg7g-xr7v-hf69 GHSA-wg7g-xr7v-hf69 2026-10-03T17:07:55.605461+00:00

Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters. Attackers with query write permission can inject JSON structural characters to alter MongoDB queries, bypassing filters to read, modify, or delete arbitrary documents.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2483 WID-SEC-W-2026-2483 — Budibase: Mehrere Schwachstellen 2026-10-03T17:07:55.605478+00:00

Ein Angreifer kann mehrere Schwachstellen in Budibase ausnutzen, um erweiterte Berechtigungen zu erlangen, SQL-Injection durchzuführen, Sicherheitsmaßnahmen zu umgehen, Konten zu übernehmen, Daten zu manipulieren oder offenzulegen sowie einen Denial-of-Service-Zustand auszulösen.