https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 13:33:29 +0000 https://db.gcve.eu/vuln/bit-mongodb-2026-18704 <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> https://db.gcve.eu/vuln/bit-mongodb-2026-18704 https://db.gcve.eu/vuln/fkie_cve-2026-18704 <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> https://db.gcve.eu/vuln/fkie_cve-2026-18704 https://db.gcve.eu/vuln/ghsa-cpxv-jhq7-7xvw <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> https://db.gcve.eu/vuln/ghsa-cpxv-jhq7-7xvw https://db.gcve.eu/vuln/ubuntu-cve-2026-18704 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>An issue in MongoDB Server&#39;s aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an appropriate authorization check on its embedded operations.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-18704