https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:03:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375543 EUVD-2026-375543 https://cve.radiocsirt.org/vuln/euvd-2026-375543 https://cve.radiocsirt.org/vuln/fkie_cve-2026-96750 <p>MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database&#39;s view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have content evaluated as shell input within the Compass process, with that process&#39;s privileges. This requires the Compass user to open the shell for the affected database.</p> <p>MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database&#39;s view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have content evaluated as shell input within the Compass process, with that process&#39;s privileges. This requires the Compass user to open the shell for the affected database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-96750 https://cve.radiocsirt.org/vuln/ghsa-g679-8jm6-pqf7 <p>MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database&#39;s view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have content evaluated as shell input within the Compass process, with that process&#39;s privileges. This requires the Compass user to open the shell for the affected database.</p> <p>MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database&#39;s view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have content evaluated as shell input within the Compass process, with that process&#39;s privileges. This requires the Compass user to open the shell for the affected database.</p> https://cve.radiocsirt.org/vuln/ghsa-g679-8jm6-pqf7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3583 <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern (Python Driver, PHP Driver, C Driver, Compass und Laravel) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um beliebigen Programmcode auszuführen und um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Treibern (Python Driver, PHP Driver, C Driver, Compass und Laravel) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um beliebigen Programmcode auszuführen und um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3583