Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/19 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-18697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting...

8.7CVSS5.4AI score0.00346EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/11 6:39 p.m.11 views

CVE-2026-18697

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

8.7CVSS5.3AI score0.00346EPSS
SaveExploits0References2Affected Software1
MongoDB
MongoDB
added 2026/08/11 6:39 p.m.8 views

Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

8.7CVSS5.3AI score0.00346EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/11 6:39 p.m.29 views

CVE-2026-18697 Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongos

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

8.7CVSS0.00346EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 6:39 p.m.15 views

EUVD-2026-56910

An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos router process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service, disrupting client connections routed through the...

8.7CVSS5.3AI score0.00346EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/07/27 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-13062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are...

7.1CVSS5.6AI score0.00188EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 8:16 p.m.10 views

UBUNTU-CVE-2026-13062

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in...

7.1CVSS5.9AI score0.00188EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/07/22 8:16 p.m.17 views

CVE-2026-13062

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in...

7.1CVSS5.5AI score0.00188EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/22 7:19 p.m.16 views

CVE-2026-13062 MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Commands on Sharded Clusters

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in...

7.1CVSS5.6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/07/22 7:19 p.m.11 views

EUVD-2026-47799

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in...

7.1CVSS5.4AI score0.00188EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/22 7:19 p.m.14 views

CVE-2026-13062

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in...

7.1CVSS5.4AI score0.00188EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/22 12:00 a.m.15 views

PT-2026-63466

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authenticated user with write privileges on a collection enabled with Queryable Encryption can modify internal encryption metadata fields that should be controlled by the server. This occu...

7.1CVSS5.4AI score0.00188EPSS
SaveExploits0References10
Rows per page
Query Builder