https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T16:23:16.895567+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-mongodb-2026-82059 BIT-mongodb-2026-82059 — Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial… 2026-10-15T16:23:19.336971+00:00

Affected: Bitnami: mongodb

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://db.gcve.eu/vuln/certfr-2026-avi-1157 certfr-2026-avi-1157 — De multiples vulnérabilités ont été découvertes dans MongoDB Server. Certaines d'entre elles permettent à un attaquant… 2026-10-15T16:23:19.337115+00:00 certfr-2026-avi-1157 https://db.gcve.eu/vuln/fkie_cve-2026-82059 fkie_cve-2026-82059 2026-10-15T16:23:19.337166+00:00

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://db.gcve.eu/vuln/ghsa-4xr8-p4jv-mh28 GHSA-4xr8-p4jv-mh28 2026-10-15T16:23:19.337211+00:00

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-82059 UBUNTU-CVE-2026-82059 2026-10-15T16:23:19.337238+00:00

Affected: Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges could trigger an assertion failure in the index key generation code path. In certain build configurations, this assertion failure results in termination of the mongod process, causing a denial of service to all connected clients.