1260 matches found
CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
CVE-2026-13060
Technical details are not publicly available in the provided documents. The supplied materials do not specify affected products/components, root cause, or remediation. Monitor for updates.
CVE-2026-13060 $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Collection Access
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
EUVD-2026-47774
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections...
EUVD-2026-47783
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit...
PT-2026-63464
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with limited read privileges can access documents from collections they are not authorized to read. This occurs because of an inconsistency...
EUVD-2026-46389
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
CVE-2026-47237
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-12590 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, tileserver-gl, code-server, json-server, argo-workflows, sqlpad, kubeflow-pipelines, langfuse...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, tileserver-gl, code-server, json-server, argo-workflows, sqlpad, kubeflow-pipelines, langfuse...
CVE-2026-56144
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
CVE-2026-56144
Technical details about CVE-2026-56144 are not publicly provided in the supplied documents; no affected products, versions, or fixes are specified here. Monitor for updates in connected sources.
CVE-2026-56144
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
CVE-2026-56144 Incorrect Authorization in Elasticsearch Leading to Information Disclosure
Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices'...
Elasticsearch 8.19.18, 9.3.7, 9.4.4 Security Update (ESA-2026-56)
Incorrect Authorization in Elasticsearch Leading to Information Disclosure Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are...
PT-2026-62092
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Insufficient authorization controls in the ingest simulation feature allow an authenticated user with limited index privileges to target indices they are not authorized to access...
CVE-2023-24816 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2025-9906 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...