MongoDB Multiple Vulnerabilities
Release Date: 13 Aug 2026
Multiple vulnerabilities were identified in MongoDB. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, remote code execution, data manipulation, denial of service condition, elevation of privilege and sensitive information disclosure on the targeted system.
Impact
- Denial of Service
- Information Disclosure
- Remote Code Execution
- Security Restriction Bypass
- Elevation of Privilege
- Data Manipulation
System / Technologies affected
MongoDB Driver 4.11.0 versions prior to 5.9.2
MongoDB Server 7.0.0 versions prior to 7.0.40
MongoDB Server 8.0.0 versions prior to 8.0.29
MongoDB Server 8.3.0 versions prior to 8.3.8
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
- CVE-2026-18687
- CVE-2026-18688
- CVE-2026-18690
- CVE-2026-18691
- CVE-2026-18692
- CVE-2026-18693
- CVE-2026-18694
- CVE-2026-18695
- CVE-2026-18696
- CVE-2026-18697
- CVE-2026-18698
- CVE-2026-18699
- CVE-2026-18700
- CVE-2026-18701
- CVE-2026-18702
- CVE-2026-18703
- CVE-2026-18704
- CVE-2026-18705
- CVE-2026-18706
- CVE-2026-18707
- CVE-2026-18708
- CVE-2026-18709
- CVE-2026-18710
- CVE-2026-18711
- CVE-2026-18712
沒有留言:
發佈留言