https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:32:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351406 EUVD-2026-351406 https://cve.radiocsirt.org/vuln/euvd-2026-351406 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18710 <p>A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application&#39;s logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.</p> <p>A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application&#39;s logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18710 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18710 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mongo-java-driver, Ubuntu:18.04:LTS: mongo-java-driver, Ubuntu:20.04:LTS: mongo-java-driver, Ubuntu:22.04:LTS: mongo-java-driver, Ubuntu:24.04:LTS: mongo-java-driver, Ubuntu:26.04:LTS: mongo-java-driver</p> <p>A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application&#39;s logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mongo-java-driver, Ubuntu:18.04:LTS: mongo-java-driver, Ubuntu:20.04:LTS: mongo-java-driver, Ubuntu:22.04:LTS: mongo-java-driver, Ubuntu:24.04:LTS: mongo-java-driver, Ubuntu:26.04:LTS: mongo-java-driver</p> <p>A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal operation and requires no special privileges to trigger. A party able to read the affected application&#39;s logs or downstream log-aggregation storage could recover the credential and reuse it to authenticate to the associated network infrastructure. This issue affects confidentiality only.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18710 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2794