https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:24:19 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1169 certfr-2026-avi-1169 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1169 https://cve.radiocsirt.org/vuln/euvd-2026-366677 EUVD-2026-366677 https://cve.radiocsirt.org/vuln/euvd-2026-366677 https://cve.radiocsirt.org/vuln/fkie_cve-2026-88032 <p>A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.</p> <p>A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-88032 https://cve.radiocsirt.org/vuln/ghsa-38pq-38pp-9f4m <p>A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.</p> <p>A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.</p> https://cve.radiocsirt.org/vuln/ghsa-38pq-38pp-9f4m https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-88032 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mongo-java-driver, Ubuntu:18.04:LTS: mongo-java-driver, Ubuntu:20.04:LTS: mongo-java-driver, Ubuntu:22.04:LTS: mongo-java-driver, Ubuntu:24.04:LTS: mongo-java-driver, Ubuntu:26.04:LTS: mongo-java-driver</p> <p>A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mongo-java-driver, Ubuntu:18.04:LTS: mongo-java-driver, Ubuntu:20.04:LTS: mongo-java-driver, Ubuntu:22.04:LTS: mongo-java-driver, Ubuntu:24.04:LTS: mongo-java-driver, Ubuntu:26.04:LTS: mongo-java-driver</p> <p>A use-after-free in the reactive client-side encryption component of the MongoDB Java Driver can cause native resources to be freed while an affected encrypted operation is still using them when the operation is cancelled. A party able to cause such an operation to be cancelled may cause the hosting application process to terminate. Reaching the issue requires an affected reactive encryption configuration that retrieves KMS credentials on demand.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-88032 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3320 <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Abfrage- und Zugriffsbeschränkungen zu umgehen, nicht vorgesehene Datensätze oder Dateien auszulesen, zu verändern oder zu löschen sowie unter bestimmten Voraussetzungen MongoDB-Server oder Anwendungen zum Absturz zu bringen und dadurch einen Denial-of-Service zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Abfrage- und Zugriffsbeschränkungen zu umgehen, nicht vorgesehene Datensätze oder Dateien auszulesen, zu verändern oder zu löschen sowie unter bestimmten Voraussetzungen MongoDB-Server oder Anwendungen zum Absturz zu bringen und dadurch einen Denial-of-Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3320