https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:17:26.081397+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-mongodb-2026-9746 BIT-mongodb-2026-9746 — Server crashes in case of the use of exchange 2026-10-04T08:17:26.163043+00:00

Affected: Bitnami: mongodb

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0735 certfr-2026-avi-0735 — De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer un déni de s… 2026-10-04T08:17:26.163097+00:00 certfr-2026-avi-0735 https://cve.radiocsirt.org/vuln/euvd-2026-326361 EUVD-2026-326361 2026-10-04T08:17:26.163117+00:00 EUVD-2026-326361 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9746 fkie_cve-2026-9746 2026-10-04T08:17:26.163129+00:00

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

 https://cve.radiocsirt.org/vuln/ghsa-vgv4-555v-w6x3 GHSA-vgv4-555v-w6x3 2026-10-04T08:17:26.163150+00:00

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0209 NCSC-2026-0209 — Kwetsbaarheden verholpen in MongoDB Server 2026-10-04T08:17:26.163165+00:00 NCSC-2026-0209 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9746 UBUNTU-CVE-2026-9746 2026-10-04T08:17:26.163192+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1868 WID-SEC-W-2026-1868 — MongoDB: Mehrere Schwachstellen 2026-10-04T08:17:26.163226+00:00

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.