Lucene search
+L

14 matches found

OSV
OSV
•added 2026/08/17 5:49 a.m.•16 views

BIT-MONGODB-2026-13068 MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•32 views

PT-2026-73387

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS5.3AI score0.00251EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/27 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-13068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database,...

4.3CVSS5.8AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/22 8:16 p.m.•18 views

CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS0.00251EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/22 8:16 p.m.•28 views

CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS5.5AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/22 7:16 p.m.•52 views

CVE-2026-13068 MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.2CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/22 7:16 p.m.•111 views

CVE-2026-13068

Summary: CVE-2026-13068 affects MongoDB mongos. An authenticated user with cursor-termination privileges on one database can terminate active cursors on a different database, disrupting ongoing queries for other users. The issue stems from an authorization check that does not properly scope privi...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References1Affected Software1
MongoDB
MongoDB
•added 2026/07/22 7:16 p.m.•29 views

MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS5.9AI score0.00251EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/07/22 7:16 p.m.•24 views

EUVD-2026-47793

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.2CVSS5.3AI score0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/22 7:16 p.m.•65 views

CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.2CVSS5.3AI score0.00251EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/07/22 7:16 p.m.•34 views

CVE-2026-13068 MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

2.3CVSS5.5AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/22 7:16 p.m.•22 views

CVE-2026-13068 MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cross-Database Privilege Misuse

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.2CVSS5.9AI score0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/22 12:00 a.m.•5 views

CVE-2026-13068: Incorrect Authorization

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

4.3CVSS5.8AI score0.00251EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/22 12:00 a.m.•26 views

PT-2026-63472

Name of the Vulnerable Software and Affected Versions MongoDB mongos affected versions not specified Description An authenticated user with cursor termination privileges on one database may be incorrectly allowed to terminate active cursors on a different database. This issue occurs because an...

4.3CVSS5.2AI score0.00251EPSS
SaveExploits0References11
Rows per page
Query Builder