Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.
CVE-2026-13060
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.
CVE-2026-13060
An authenticated user with limited read privileges may be able to acce ...
ROS-20261105-80-0020
Уязвимость mongodb-org
ROS-20261105-73-0021
Уязвимость mongodb-org
GHSA-64h4-qmc6-6gw9
An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions.
ALT-PU-2026-12889
ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-13060 An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13060 An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-13060 An authenticated user with limited read privileges may be able to acce ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | ROS-20261105-80-0020 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | 4 дня назад |
| ROS-20261105-73-0021 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | 4 дня назад |
| GHSA-64h4-qmc6-6gw9 An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in how the $graphLookup aggregation stage is evaluated during authorization and during execution. Affected scenarios involve collections referenced within existing view pipeline definitions. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-12889 ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1 | CVSS3: 8.1 | 3 месяца назад |
Уязвимостей на страницу