https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:16:02 +0000 https://cve.radiocsirt.org/vuln/bit-mongodb-2026-13057 <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.</p> <p>In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.</p> <p>In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> https://cve.radiocsirt.org/vuln/bit-mongodb-2026-13057 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0922 certfr-2026-avi-0922 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0922 https://cve.radiocsirt.org/vuln/euvd-2026-339946 EUVD-2026-339946 https://cve.radiocsirt.org/vuln/euvd-2026-339946 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13057 <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.</p> <p>In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.</p> <p>In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13057 https://cve.radiocsirt.org/vuln/ghsa-6cv6-595x-vg7h <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.</p> <p>In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.</p> <p>In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> https://cve.radiocsirt.org/vuln/ghsa-6cv6-595x-vg7h https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-13057 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-13057 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2487 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Speicherbeschädigungen herbeizuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Speicherbeschädigungen herbeizuführen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2487