Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-103965

Опубликовано: 13 окт. 2026
Источник: debian
EPSS Низкий

Описание

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mongodbremovedpackage

Примечания

  • https://jira.mongodb.org/browse/SERVER-134618

EPSS

Процентиль: 4%
0.0015
Низкий

Связанные уязвимости

CVSS3: 5.4
ubuntu
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
nvd
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
github
26 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 6.5
altlinux
21 день назад

ALT-PU-2026-18558: package `mongo7.0` update to version 7.0.45-alt1

EPSS

Процентиль: 4%
0.0015
Низкий