Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-8053
An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
CVE-2026-8053
An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
CVE-2026-8053
An issue in MongoDB Server's time-series collection implementation all ...
GHSA-pr63-cc36-q84h
An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
BDU:2026-07604
Уязвимость реализации коллекции временных рядов системы управления базами данных MongoDB, позволяющая нарушителю выполнить произвольный код
ROS-20260902-80-0011
Уязвимость mongodb-org
ROS-20260902-73-0010
Уязвимость mongodb-org
ALT-PU-2026-8263
ALT-PU-2026-8263: package `mongo6.0` update to version 6.0.28-alt0.p10.1
ALT-PU-2026-8261
ALT-PU-2026-8261: package `mongo5.0` update to version 5.0.33-alt0.p10.1
ALT-PU-2026-8099
ALT-PU-2026-8099: package `mongo6.0` update to version 6.0.28-alt1
ALT-PU-2026-8035
ALT-PU-2026-8035: package `mongo5.0` update to version 5.0.33-alt1
ALT-PU-2026-8191
ALT-PU-2026-8191: package `mongo7.0` update to version 7.0.34-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-8053 An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2. | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
 | CVE-2026-8053 An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2. | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
| CVE-2026-8053 An issue in MongoDB Server's time-series collection implementation all ... | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
| GHSA-pr63-cc36-q84h An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write in the mongod process. The issue results from an inconsistency in the internal field-name-to-index mapping within the time-series bucket catalog. Under certain conditions this can result in arbitrary code execution. This issue impacts MongoDB Server v5.0 versions prior to 5.0.33, v6.0 versions prior to 6.0.28, v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2. | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
 | BDU:2026-07604 Уязвимость реализации коллекции временных рядов системы управления базами данных MongoDB, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
 | ROS-20260902-80-0011 Уязвимость mongodb-org | CVSS3: 8.8 | 1% Низкий | 2 месяца назад |
| ROS-20260902-73-0010 Уязвимость mongodb-org | CVSS3: 8.8 | 1% Низкий | 2 месяца назад |
| ALT-PU-2026-8263 ALT-PU-2026-8263: package `mongo6.0` update to version 6.0.28-alt0.p10.1 | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-8261 ALT-PU-2026-8261: package `mongo5.0` update to version 5.0.33-alt0.p10.1 | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-8099 ALT-PU-2026-8099: package `mongo6.0` update to version 6.0.28-alt1 | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-8035 ALT-PU-2026-8035: package `mongo5.0` update to version 5.0.33-alt1 | CVSS3: 8.8 | 1% Низкий | 6 месяцев назад |
| ALT-PU-2026-8191 ALT-PU-2026-8191: package `mongo7.0` update to version 7.0.34-alt1 | CVSS3: 8.8 | 6 месяцев назад |
Уязвимостей на страницу