Lucene search
+L

7 matches found

NVD
NVD
added 2026/07/22 8:16 p.m.7 views

CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 8:16 p.m.6 views

UBUNTU-CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.9AI score0.00272EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/22 7:21 p.m.35 views

CVE-2026-13059 Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 7:21 p.m.7 views

CVE-2026-13059 Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/22 7:21 p.m.9 views

CVE-2026-13059

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.3AI score0.00272EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/22 7:21 p.m.44 views

CVE-2026-13059

Technical details are not publicly available in the provided documents. No specific affected products, versions, or exploit vectors are stated here. Monitor for updates as new information may emerge.

8.6CVSS5.3AI score0.00272EPSS
SaveExploits0References1Affected Software1
MongoDB
MongoDB
added 2026/07/22 7:21 p.m.9 views

Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Control Bypass

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands ...

8.6CVSS5.3AI score0.00272EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder