Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-18696
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation.
CVE-2026-18696
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation.
CVE-2026-18696
An issue in MongoDB Server's applyOps command could allow an authentic ...
ROS-20261105-80-0100
Множественные уязвимости mongodb-org
ROS-20261105-73-0101
Множественные уязвимости mongodb-org
GHSA-85cq-4fh4-j8cv
An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation.
ALT-PU-2026-15875
ALT-PU-2026-15875: package `mongo7.0` update to version 7.0.40-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-18696 An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | CVE-2026-18696 An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-18696 An issue in MongoDB Server's applyOps command could allow an authentic ... | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
 | ROS-20261105-80-0100 Множественные уязвимости mongodb-org | CVSS3: 6.5 | 0% Низкий | 4 дня назад |
| ROS-20261105-73-0101 Множественные уязвимости mongodb-org | CVSS3: 6.5 | 0% Низкий | 4 дня назад |
| GHSA-85cq-4fh4-j8cv An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not have permission to manipulate. This is due to an inconsistency in how the target collection is determined between the authorization check and the actual operation. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-15875 ALT-PU-2026-15875: package `mongo7.0` update to version 7.0.40-alt1 | CVSS3: 8.8 | 2 месяца назад |
Уязвимостей на страницу