https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 16:28:57 +0000 https://db.gcve.eu/vuln/bit-mongodb-2026-82074 <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> <p><strong>Affected:</strong> Bitnami: mongodb</p> <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> https://db.gcve.eu/vuln/bit-mongodb-2026-82074 https://db.gcve.eu/vuln/certfr-2026-avi-1157 certfr-2026-avi-1157 https://db.gcve.eu/vuln/certfr-2026-avi-1157 https://db.gcve.eu/vuln/fkie_cve-2026-82074 <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> https://db.gcve.eu/vuln/fkie_cve-2026-82074 https://db.gcve.eu/vuln/ghsa-jxm4-wg55-8759 <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> https://db.gcve.eu/vuln/ghsa-jxm4-wg55-8759 https://db.gcve.eu/vuln/ubuntu-cve-2026-82074 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mongodb, Ubuntu:Pro:16.04:LTS: mongodb, Ubuntu:Pro:18.04:LTS: mongodb, Ubuntu:Pro:20.04:LTS: mongodb</p> <p>MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server&#39;s authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-82074