CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-13055

    🚨 CVE-2026-13055 The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The...

  • CVE-2026-13056

    🚨 CVE-2026-13056 Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in...

  • CVE-2026-13057

    🚨 CVE-2026-13057 An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded...

  • CVE-2026-13059

    🚨 CVE-2026-13059 An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based...

  • CVE-2026-13060

    🚨 CVE-2026-13060 An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to...

  • CVE-2026-13061

    🚨 CVE-2026-13061 An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions...

  • CVE-2026-13062

    🚨 CVE-2026-13062 An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal...

  • CVE-2026-13063

    🚨 CVE-2026-13063 An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory...

  • CVE-2026-13064

    🚨 CVE-2026-13064 Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected...

  • CVE-2026-13065

    🚨 CVE-2026-13065 A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a...

  • CVE-2026-13066

    🚨 CVE-2026-13066 Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in...

  • CVE-2026-13067

    🚨 CVE-2026-13067 When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated...

  • CVE-2026-13068

    🚨 CVE-2026-13068 An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active...

  • CVE-2026-13069

    🚨 CVE-2026-13069 An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted...

  • CVE-2026-13070

    🚨 CVE-2026-13070 A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a...

  • CVE-2026-13071

    🚨 CVE-2026-13071 An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that...

  • CVE-2026-13072

    🚨 CVE-2026-13072 When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during...

  • CVE-2026-13073

    🚨 CVE-2026-13073 An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted...

Статистика статей

Статьи
53,087
Просмотры
258,367
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху