<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 21:58:39 +0000</lastBuildDate>
    <item>
      <title>certfr-2025-avi-0166 — De multiples vulnérabilités ont été découvertes dans MongoDB. Elles permettent à un attaquant de provoquer une élévatio…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0166</link>
      <description>certfr-2025-avi-0166</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2025-avi-0166</guid>
    </item>
    <item>
      <title>EUVD-2026-219422</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-219422</link>
      <description>EUVD-2026-219422</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-219422</guid>
    </item>
    <item>
      <title>fkie_cve-2025-1692</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2025-1692</link>
      <description>&lt;p&gt;The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2025-1692</guid>
    </item>
    <item>
      <title>GHSA-973h-3x6p-qg37 — MongoDB Shell may be susceptible to control character injection via pasting</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-973h-3x6p-qg37</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; npm: mongosh&lt;/p&gt;
&lt;p&gt;The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; npm: mongosh&lt;/p&gt;
&lt;p&gt;The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfuscate malicious code. This issue affects mongosh versions prior to 2.3.9.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-973h-3x6p-qg37</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-0454 — MongoDB und MongoDB Compass: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0454</link>
      <description>&lt;p&gt;Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in MongoDB und MongoDB Compass ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren und erhöhte Rechte zu erlangen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in MongoDB und MongoDB Compass ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren und erhöhte Rechte zu erlangen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0454</guid>
    </item>
  </channel>
</rss>
