2 matches found
CVE-2026-82060: Improper Neutralization of Special Elements in Data Query Logic
In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...
5.4CVSS5.8AI score0.00318EPSS
SaveExploits0References3
PT-2026-87153
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description Insufficient validation of shard key values during document insertion allows authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in...
5.4CVSS5.7AI score0.00318EPSS
SaveExploits0References8
20