Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-103965

Опубликовано: 13 окт. 2026
Источник: nvd
CVSS3: 5.4
EPSS Низкий

Описание

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

EPSS

Процентиль: 4%
0.0015
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 5.4
ubuntu
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 5.4
debian
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain c ...

CVSS3: 5.4
github
27 дней назад

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

CVSS3: 6.5
altlinux
21 день назад

ALT-PU-2026-18558: package `mongo7.0` update to version 7.0.45-alt1

EPSS

Процентиль: 4%
0.0015
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-94