Linux Distros Unpatched Vulnerability : CVE-2026-96297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an intern...

Linux Distros Unpatched Vulnerability : CVE-2026-104005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos proces...

Linux Distros Unpatched Vulnerability : CVE-2026-103965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain...

Vulnerabilities in IBM Guardium Data Protection

IBM has identified several vulnerabilities in the IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. These vulnerabilities include remote code execution through path traversal, multiple SQL injection issues, and various buffer overflow vulnerabilities heap-based, stack-based, and buffer...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.33.4 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization

A flaw was found in org.mongodb/mongodb-driver. During routine client initialization, sensitive configuration information, including credentials for outbound network connectivity, is written to application log output in cleartext. A local attacker with the ability to read the affected application...

CVE-2026-81518

A flaw was found in mongosqld. When mongosqld is configured to use client certificates for authentication, it requests a certificate during the TLS Transport Layer Security handshake but does not enforce its presence. This allows a remote attacker with network access to establish a session withou...

CVE-2026-81522

A flaw was found in the MongoDB C++ Driver. This weakness allows special characters to be embedded in caller-supplied namespace identifiers. An application that constructs a namespace identifier from untrusted input without proper validation could be redirected to an unintended target. This could...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-96749 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-96749 Source advisory...

mongodb-migrations (0.1.1), rolabesti (>=0.1.0, <=0.5.3) potentially affected by CVE-2026-96749 via pymongo (3.2.1)

pymongo PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongodb-migrations 0.1.1 - rolabesti =0.1.0, =0.5.3 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

bolinette (>=0.12.1, <=0.14.0), clean-architecture-mongodb-adapter (0.1.3) +16 more potentially affected by CVE-2026-96749 via pymongo (3.12.1)

pymongo PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.12.1, =0.0.3, =1.0.38, =0.0.0, =0.2.22, =0.1.3, =1.0.0, =0.0.7, =0.3.6, =0.1.7, =1.1.1, =1.5.0 - spreg-satosa-sync 1.1.3 and more...

bolinette (>=0.12.1, <=0.14.0), clean-architecture-mongodb-adapter (0.1.3) +16 more potentially affected by CVE-2026-88029 via pymongo (3.12.1)

pymongo PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - bolinette =0.12.1, =0.0.3, =1.0.38, =0.0.0, =0.2.22, =0.1.3, =1.0.0, =0.0.7, =0.3.6, =0.1.7, =1.1.1, =1.5.0 - spreg-satosa-sync 1.1.3 and more...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-88029 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-88029 Source advisory...

mongodb-migrations (0.1.1), rolabesti (>=0.1.0, <=0.5.3) potentially affected by CVE-2026-88029 via pymongo (3.2.1)

pymongo PYPI version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - mongodb-migrations 0.1.1 - rolabesti =0.1.0, =0.5.3 Source cves: CVE-2026-88029 Source advisory: OSV:PYSEC-2026-4294...

CLEANSTART-2026-IU25622 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS

Security vulnerability affects the mongodb package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...

RLSA-2026:82858 Important: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-106430

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...

Rocky Linux 8 [CIQ] Security Update: python-nose-docs / python-pymongo-debuginfo / etc (crlsa-2026_82858)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682858 advisory. pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection CVE-2026-88029 Tenable has extracted the preceding description...

Linux Distros Unpatched Vulnerability : CVE-2026-106435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression...

UBUNTU-CVE-2026-106430

The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling application to interpret the same name differently. An authenticated actor who can influence a name passed by an...