Most recent entries from all

bdu:2026-03577

BIT-mongodb-2026-25609 — profile command may permit unauthorized configuration

Affected: Bitnami: mongodb

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

EUVD-2026-267884

fkie_cve-2026-25609

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

GHSA-57mf-76f3-g3qh

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

Withdrawn: UBUNTU-CVE-2026-25609

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: mongodb, Ubuntu:16.04:LTS: mongodb, Ubuntu:18.04:LTS: mongodb, Ubuntu:20.04:LTS: mongodb

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

WID-SEC-W-2026-0386 — MongoDB Server, Go Driver, Ruby Driver: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Ruby-Code auszuführen, die Autorisierung zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Auswirkungen zu verursachen.