CVE-2026-19503: Improper Input Validation

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

PT-2026-71325

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 12.10 IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description Improper validation of user supplied input allows an unauthenticated user to execute arbitrary commands on...

Cisco IOS XE Software Security Hardening Release: August 2026 (cisco-sa-hardening-iosxe-V8NMuMZJ)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review...

Linux Distros Unpatched Vulnerability : CVE-2026-20901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privilege...

CVE-2026-73418: Improper Input Validation

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a malformed Authorization: Bearer header. When no session...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in SQL

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17111, CVE-2026-17110, CVE-2026-17109, CVE-2026-17420, CVE-2026-17222, CVE-2026-17419, CVE-2026-17418 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17111 DESCRIPTION: IBM i is...

CVE-2026-18699 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

CVE-2026-18699

Technical details about CVE-2026-18699 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2026-18699 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

CVE-2026-18699 Improper Input Validation in MongoDB Query Planner Leads to Denial of Service

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

Improper Input Validation in MongoDB Query Planner Leads to Denial of Service

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

CVE-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

CVE-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

CVE-2026-18695 Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service...

CVE-2026-18695 Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service...

CVE-2026-18695 Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Service

An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a denial of service...

CVE-2026-18695

CVE-2026-18695 affects MongoDB Server, specifically time-series collections that use a metaField. The issue occurs in how certain query predicates are processed, and an authenticated user with write access can cause the server process to terminate unexpectedly, resulting in a denial of service. T...

CVE-2026-18707 Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service...

CVE-2026-18707 Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service...

CVE-2026-18707

The CVE-2026-18707 entry concerns MongoDB Server where an authenticated user (even one with minimal privileges) can trigger a denial of service by submitting a specially crafted aggregation command that causes the server process to terminate. The available documents identify the affected product ...