https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:26:07 +0000 https://cve.radiocsirt.org/vuln/bit-mongodb-2026-82062 <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> https://cve.radiocsirt.org/vuln/bit-mongodb-2026-82062 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1157 certfr-2026-avi-1157 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1157 https://cve.radiocsirt.org/vuln/euvd-2026-365270 EUVD-2026-365270 https://cve.radiocsirt.org/vuln/euvd-2026-365270 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82062 <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82062 https://cve.radiocsirt.org/vuln/ghsa-89pf-pvm7-xj92 <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> https://cve.radiocsirt.org/vuln/ghsa-89pf-pvm7-xj92 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-82062 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container operations that are disabled by default in production configurations, allowing direct storage-engine writes to arbitrary internal storage tables. The authorization check for these operations validates only the operation&#39;s namespace, not the actual storage target, enabling writes to unrelated internal metadata or other collections&#39; data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-82062 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3236 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3236