Поиск уязвимостей
Количество 8
Количество 8
BDU:2026-17911
Уязвимость компонента MozJS системы управления базами данных MongoDB, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20261105-80-0114
Множественные уязвимости mongodb-org
ROS-20261105-73-0115
Множественные уязвимости mongodb-org
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process.
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process.
CVE-2026-13078
A vulnerability was discovered in MongoDB Server where the server-side ...
ALT-PU-2026-12889
ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1
GHSA-fpx3-f8x9-6hqm
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-17911 Уязвимость компонента MozJS системы управления базами данных MongoDB, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 7.7 | 0% Низкий | 5 месяцев назад |
 | ROS-20261105-80-0114 Множественные уязвимости mongodb-org | CVSS3: 7.7 | 0% Низкий | 4 дня назад |
| ROS-20261105-73-0115 Множественные уязвимости mongodb-org | CVSS3: 7.7 | 0% Низкий | 4 дня назад |
 | CVE-2026-13078 A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13078 A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
| CVE-2026-13078 A vulnerability was discovered in MongoDB Server where the server-side ... | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-12889 ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1 | CVSS3: 8.1 | 3 месяца назад | |
| GHSA-fpx3-f8x9-6hqm A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read arbitrary files from the host filesystem using the mongod process's privileges. An authenticated user could exploit this through crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. | CVSS3: 7.7 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу