https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:10:42 +0000 https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18690 <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> https://cve.radiocsirt.org/vuln/bit-mongodb-2026-18690 https://cve.radiocsirt.org/vuln/euvd-2026-351289 EUVD-2026-351289 https://cve.radiocsirt.org/vuln/euvd-2026-351289 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18690 <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18690 https://cve.radiocsirt.org/vuln/ghsa-494v-9jwj-989h <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> https://cve.radiocsirt.org/vuln/ghsa-494v-9jwj-989h https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18690 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper authorization.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18690 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794