https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:00:15.307879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-82059 BIT-mongodb-2026-82059 — Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial… 2026-10-03T13:00:15.392095+00:00

Affected: Bitnami: mongodb

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1157 certfr-2026-avi-1157 — De multiples vulnérabilités ont été découvertes dans MongoDB Server. Certaines d'entre elles permettent à un attaquant… 2026-10-03T13:00:15.392155+00:00 certfr-2026-avi-1157 https://cve.radiocsirt.org/vuln/euvd-2026-365272 EUVD-2026-365272 2026-10-03T13:00:15.392176+00:00 EUVD-2026-365272 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82059 fkie_cve-2026-82059 2026-10-03T13:00:15.392189+00:00

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://cve.radiocsirt.org/vuln/ghsa-4xr8-p4jv-mh28 GHSA-4xr8-p4jv-mh28 2026-10-03T13:00:15.392213+00:00

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-82059 UBUNTU-CVE-2026-82059 2026-10-03T13:00:15.392230+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3236 WID-SEC-W-2026-3236 — MongoDB Server: Mehrere Schwachstellen 2026-10-03T13:00:15.392254+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.