Improper Neutralization of Special Elements in Data Query Logic

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via improper neutralization of special elements in the GridFS process. An attacker can access unauthorized file content or delete all file chunks by injecting query operato...

CVE-2026-88033

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Java Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

Duplicate Advisory: pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8fvv-fgr5-f8ch. This link is maintained to preserve external references. Original Description Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver...

GHSA-8H2C-GHFF-MPG9 Duplicate Advisory: pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8fvv-fgr5-f8ch. This link is maintained to preserve external references. Original Description Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver...

CVE-2026-81467

Dell ThinOS 10 (versions prior to 2605_10.2616 ) is affected by an OS Command Injection vulnerability. An unauthenticated attacker with remote network access can exploit this flaw to achieve arbitrary command execution on the device. Dell assigned a CVSS v3.1 score of 9.8 (Critical) , reflecting ...

CVE-2026-12683

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319...

CVE-2026-7188

Armiya Information Technologies Ltd. Co. Access Control System versions before Version 2 are affected by an SQL injection vulnerability caused by improper neutralization of special elements used in an SQL command. The vulnerability is rated CRITICAL (CVSS 9.8) with a network attack vector, low co...

EUVD-2026-75293

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...

PT-2026-89542

Name of the Vulnerable Software and Affected Versions MongoDB integration for Laravel affected versions not specified Description Improper neutralization of special elements in data query logic within the polymorphic relation handling allows a caller-supplied relation identifier to be interpreted...

CVE-2026-88029: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-88036: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...

CVE-2026-88029: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-88030: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

PT-2026-89543

Name of the Vulnerable Software and Affected Versions MongoDB Python Driver versions prior to 4.18.1 Description Improper neutralization of special elements in the data query logic of the GridFS component allows a caller-supplied structured file identifier to be interpreted as a query condition...

PT-2026-89300

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2...

CVE-2026-12682: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319...

PT-2026-89636

🚨 CVE-2026-81940 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names. 🎖@cveNotify...

CVE-2026-88025: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier...

CVE-2026-88024: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-88022: Improper Neutralization of Special Elements in Data Query Logic

Improper neutralization of special elements in data query logic in the MongoDB integration for Laravel can cause an array supplied to an explicit equality filter to be interpreted as a query condition rather than as a literal value. This affects the three-argument where method when the operator i...