Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-13062
An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.
CVE-2026-13062
An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.
CVE-2026-13062
An authenticated user with write privileges on a Queryable Encryption- ...
ROS-20261105-80-0018
Уязвимость mongodb-org
ROS-20261105-73-0019
Уязвимость mongodb-org
GHSA-4fx2-v6gr-hm23
An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.
ALT-PU-2026-12889
ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-13062 An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-13062 An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-13062 An authenticated user with write privileges on a Queryable Encryption- ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | ROS-20261105-80-0018 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | 4 дня назад |
| ROS-20261105-73-0019 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | 4 дня назад |
| GHSA-4fx2-v6gr-hm23 An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-12889 ALT-PU-2026-12889: package `mongo7.0` update to version 7.0.39-alt1 | CVSS3: 8.1 | 3 месяца назад |
Уязвимостей на страницу