DeutschShown in its original language — a full translation is planned for a future version.
MongoDB: Mehrere Schwachstellen
view advisory published 2026-08-11
Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.
01
describes (25)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-18710US | — | — | ||
A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext du… | ||||
| CVE-2026-18712US | —OT elevated | — | ||
An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modific… | ||||
| CVE-2026-18711US | — | — | ||
An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying… | ||||
| CVE-2026-18709US | —OT elevated | — | ||
An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the… | ||||
| CVE-2026-18708US | — | — | ||
An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of… | ||||
| CVE-2026-18707US | — | — | ||
An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a speci… | ||||
| CVE-2026-18706US | — | — | ||
An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal referenc… | ||||
| CVE-2026-18705US | — | — | ||
An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over… | ||||
| CVE-2026-18704US | —OT elevated | — | ||
An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be ab… | ||||
| CVE-2026-18703US | —OT elevated | — | ||
An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, eve… | ||||
| CVE-2026-18702US | — | — | ||
An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather tha… | ||||
| CVE-2026-18701US | — | — | ||
An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially… | ||||
| CVE-2026-18700US | — | — | ||
An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has… | ||||
| CVE-2026-18699US | — | — | ||
An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specia… | ||||
| CVE-2026-18698US | —OT elevated | — | ||
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more… | ||||
| CVE-2026-18697US | — | — | ||
An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially forme… | ||||
| CVE-2026-18696US | —OT elevated | — | ||
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping… | ||||
| CVE-2026-18695US | — | — | ||
An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the… | ||||
| CVE-2026-18694US | — | — | ||
An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later pro… | ||||
| CVE-2026-18693US | — | — | ||
An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent t… | ||||
showing 20 of 25
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:62515 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:62555 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:63302 vom 2026-09-03external
- Red Hat Security Advisory RHSA-2026:83612 vom 2026-10-15external
- EU Vulnerability Database vom 2026-08-11external
- EU Vulnerability Database vom 2026-08-11external
- EU Vulnerability Database vom 2026-08-11external
- EU Vulnerability Database vom 2026-08-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan