EUVD-2026-72914

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

CVE-2026-82070

CVE-2026-82070 is an insufficiently protected credentials vulnerability in MongoDB Server's diagnostic reporting interface . The interface fails to redact credentials that are properly masked in server log output, allowing an authenticated user with monitoring-level permissions to access cleartex...

CVE-2026-82070 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

Xorcom CompletePBX 路径遍历漏洞

Xorcom CompletePBX is an Asterisk-based enterprise IP telephony system from Xorcom Israel. A path traversal vulnerability exists in Xorcom CompletePBX version 5.2.35 and earlier, which stems from path traversal in the Diagnostic Reporting module, and could result in reading arbitrary files and...