EUVD-2026-57822

Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters. Attackers with query write permission can inject JSON...

CVE-2026-73618 Budibase Server before 3.40.0 NoSQL Injection via JSON Parameter

Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters. Attackers with query write permission can inject JSON...

CVE-2026-73617

Budibase before 3.40.0 has a NoSQL injection in the MongoDB datasource integration. User-supplied parameters are enriched with handlebars using noEscaping: true and parsed without operator filtering, allowing injection of MongoDB operators through query parameters. Impact described includes bypas...

CVE-2026-18712

creationtimestamp| type| source ---|---|--- 2026-08-13 04:46:06+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18711

creationtimestamp| type| source ---|---|--- 2026-08-13 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18710

creationtimestamp| type| source ---|---|--- 2026-08-13 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18709

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:59+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18708

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:57+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18707

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18706

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18705

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18704

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813 2026-08-15 14:00:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mt4tidhjus2x 2026-08-15 14:00:52+00:00| seen|...

CVE-2026-18703

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:41+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18702

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:39+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18701

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:36+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18700

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:33+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18699

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:31+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18698

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:29+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18697

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:26+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...

CVE-2026-18696

creationtimestamp| type| source ---|---|--- 2026-08-13 04:45:23+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260813...