Lucene search
+L

49 matches found

OSV
OSV
•added 2026/09/17 11:50 a.m.•20 views

BIT-MONGODB-2026-82062 Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/17 11:49 a.m.•14 views

BIT-MONGODB-2026-18696 Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score0.004EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-82062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by...

7CVSS6AI score0.00454EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 5:18 p.m.•13 views

CVE-2026-82062

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS0.00454EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•15 views

CVE-2026-82062 Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 4:12 p.m.•34 views

CVE-2026-82062 Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS0.00454EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 4:12 p.m.•13 views

EUVD-2026-72949

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 4:12 p.m.•31 views

CVE-2026-82062

MongoDB Server is affected by an improper authorization flaw in the applyOps command . An authenticated user with elevated internal privileges can bypass a disabled feature gate by specifying an internal replication mode value not intended to be client-selectable. This enables container operation...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References1Affected Software1
MongoDB
MongoDB
•added 2026/09/08 4:12 p.m.•15 views

Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/09/08 4:12 p.m.•10 views

CVE-2026-82062 Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS6AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-82062: Incorrect Authorization

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87155

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An authenticated user with elevated internal privileges can bypass a disabled feature gate in the applyOps command by providing an internal replication mode value not intended for clie...

7CVSS6.1AI score0.00454EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/08/19 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-18696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition...

7CVSS5.9AI score0.004EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/11 7:17 p.m.•15 views

CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS0.004EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/11 7:17 p.m.•18 views

CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score0.004EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/11 7:17 p.m.•11 views

UBUNTU-CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score0.004EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/11 6:40 p.m.•6 views

CVE-2026-18696 Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score
SaveExploits0References3
MongoDB
MongoDB
•added 2026/08/11 6:40 p.m.•19 views

Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collections

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score0.004EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/08/11 6:40 p.m.•18 views

CVE-2026-18696

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score0.004EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/08/11 6:40 p.m.•15 views

EUVD-2026-56914

An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an...

7CVSS5.9AI score0.004EPSS
SaveExploits0References1
Rows per page
Query Builder