Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-18705

Опубликовано: 11 авг. 2026
Источник: debian
EPSS Низкий

Описание

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mongodbremovedpackage

EPSS

Процентиль: 19%
0.00264
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.

CVSS3: 6.5
nvd
около 1 месяца назад

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.

CVSS3: 6.5
github
около 1 месяца назад

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.

EPSS

Процентиль: 19%
0.00264
Низкий