https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:23:54.788661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-82052 BIT-mongodb-2026-82052 — $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars 2026-10-03T01:23:54.862940+00:00

Affected: Bitnami: mongodb

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1157 certfr-2026-avi-1157 — De multiples vulnérabilités ont été découvertes dans MongoDB Server. Certaines d'entre elles permettent à un attaquant… 2026-10-03T01:23:54.862997+00:00 certfr-2026-avi-1157 https://cve.radiocsirt.org/vuln/euvd-2026-366604 EUVD-2026-366604 2026-10-03T01:23:54.863018+00:00 EUVD-2026-366604 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82052 fkie_cve-2026-82052 2026-10-03T01:23:54.863031+00:00

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

 https://cve.radiocsirt.org/vuln/ghsa-p5gh-5wmf-x9p2 GHSA-p5gh-5wmf-x9p2 2026-10-03T01:23:54.863053+00:00

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-82052 UBUNTU-CVE-2026-82052 2026-10-03T01:23:54.863068+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3236 WID-SEC-W-2026-3236 — MongoDB Server: Mehrere Schwachstellen 2026-10-03T01:23:54.863090+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.