Lucene search
+L

9 matches found

OSV
OSV
•added 2026/09/17 11:50 a.m.•12 views

BIT-MONGODB-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.8AI score0.00318EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-82060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted,...

5.4CVSS5.7AI score0.00318EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 5:18 p.m.•12 views

CVE-2026-82060

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS0.00318EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 4:12 p.m.•12 views

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.7AI score0.00318EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/08 4:12 p.m.•6 views

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

2.3CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/08 4:12 p.m.•12 views

EUVD-2026-72947

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.7AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 4:12 p.m.•34 views

CVE-2026-82060

CVE-2026-82060 is an insufficient validation flaw in MongoDB Server affecting sharded collections. During document insertion, shard key values were not properly validated, allowing authenticated users to store operator-shaped objects as shard key values. When change stream events for such documen...

5.4CVSS5.7AI score0.00318EPSS
SaveExploits0References1Affected Software1
MongoDB
MongoDB
•added 2026/09/08 4:12 p.m.•10 views

Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.7AI score0.00318EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-82060: Improper Neutralization of Special Elements in Data Query Logic

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

5.4CVSS5.8AI score0.00318EPSS
SaveExploits0References3
Rows per page
Query Builder