Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-73311

creationtimestamp| type| source ---|---|--- 2026-09-08 16:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzfr5434c2f 2026-09-09 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv2gczyd5i24 2026-09-12 08:07:07+00:00| seen|...

CVE-2026-84282

creationtimestamp| type| source ---|---|--- 2026-09-08 15:19:13+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muzd2wcck52m...

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...

CVE-2026-86724

AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains a cross-site request forgery (CSRF) vulnerability in plugin/YPTWallet/view/saveBalance.php . The flaw arises because the endpoint relies solely on session cookies without token validation , allowing an attacker to craft a m...

CVE-2026-33389

creationtimestamp| type| source ---|---|--- 2026-09-08 15:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzc2inl772m...

CVE-2026-73316

creationtimestamp| type| source ---|---|--- 2026-09-08 15:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzc2b2br22r 2026-09-12 15:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdfwmkf6f2k 2026-09-12 15:37:09+00:00| seen|...

CVE-2026-78127

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i...

CVE-2026-78134

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:21+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-16 08:02:12+00:00| seen|...

CVE-2026-8044

creationtimestamp| type| source ---|---|--- 2026-09-08 13:30:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4y5gzph2t 2026-09-08 16:45:04+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:16:50+00:00| seen|...

CVE-2026-75021

creationtimestamp| type| source ---|---|--- 2026-09-08 12:53:11+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muz2vr5bhk2d 2026-09-08 13:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muz6n67cso22 2026-09-08 14:10:44+00:00| seen|...

CVE-2026-71376

creationtimestamp| type| source ---|---|--- 2026-09-08 10:08:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyro5sxdc24 2026-09-08 17:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzkwrtbhw2b...

CVE-2026-81790

creationtimestamp| type| source ---|---|--- 2026-09-08 09:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muynwy3nox23...

CVE-2019-1010022

creationtimestamp| type| source ---|---|--- 2026-09-08 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muymr7evht2t...

CVE-2026-19397

creationtimestamp| type| source ---|---|--- 2026-09-08 04:47:53+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muy7rzomjt2l 2026-09-10 14:08:55+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv6a32hvfs2y...

CVE-2026-66767

creationtimestamp| type| source ---|---|--- 2026-09-08 04:02:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muy5aviafu2k...

CVE-2026-76967

creationtimestamp| type| source ---|---|--- 2026-09-08 02:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muxwh5e3xh2b...

CVE-2026-76971

creationtimestamp| type| source ---|---|--- 2026-09-08 01:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/723azxmg5iksy...

CVE-2026-76977

creationtimestamp| type| source ---|---|--- 2026-09-08 01:47:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gc2ef2dilkicq...

CVE-2026-44756

creationtimestamp| type| source ---|---|--- 2026-09-08 00:47:52+00:00| seen| https://bsky.app/profile/suriq.io/post/3muxsetw6fn2t 2026-09-08 00:54:27+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117232688633335518 2026-09-08 01:02:57+00:00| seen|...