Lucene search
+L

10 matches found

OSV
OSV
•added 2026/09/17 11:49 a.m.•10 views

BIT-MONGODB-2026-18693 Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosure

An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions. A subsequent insert into the affected bucket could then result in the server...

7.6CVSS5.8AI score0.0034EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/17 11:49 a.m.•9 views

BIT-MONGODB-2026-18692 Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

8.8CVSS5.9AI score0.00575EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/19 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-18692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/11 7:17 p.m.•13 views

UBUNTU-CVE-2026-18692

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

8.8CVSS5.6AI score0.00575EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/11 6:36 p.m.•9 views

CVE-2026-18692 Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

8.8CVSS5.5AI score0.00575EPSS
SaveExploits0References1
MongoDB
MongoDB
•added 2026/08/11 6:36 p.m.•13 views

Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

8.8CVSS5.5AI score0.00575EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70849

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

8.8CVSS5.5AI score0.00575EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/05 7:11 p.m.•23 views

CVE-2026-8843

Creating a "2dspherebucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryableencryptedrange" indices. This issue affects MongoDB Server...

7.1CVSS5.5AI score0.0042EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/18 5:16 p.m.•32 views

CVE-2026-8843

Creating a "2dspherebucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryableencryptedrange" indices. This issue affects MongoDB Server...

7.1CVSS0.0042EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/05/18 5:16 p.m.•23 views

CVE-2026-8843

Creating a "2dspherebucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryableencryptedrange" indices. This issue affects MongoDB Server...

7.1CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Rows per page
Query Builder