agentprime: mongodb-serverEvery new CVE for mongodb-server.https://agentprime.io/CVE-2026-104005: Incorrect authorization in MongoDB Server router for bulk writes to system namespaceshttps://agentprime.io/advisories/CVE-2026-104005/https://agentprime.io/advisories/CVE-2026-104005/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:38:42 GMTCVECVE-2026-104004: Collection validators using collation-accepting expressions can crash MongoDB Server on inserthttps://agentprime.io/advisories/CVE-2026-104004/https://agentprime.io/advisories/CVE-2026-104004/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:36:14 GMTCVECVE-2026-103965: Fixed values in MongoDB Server $bucket stage may be misread as field referenceshttps://agentprime.io/advisories/CVE-2026-103965/https://agentprime.io/advisories/CVE-2026-103965/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:33:20 GMTCVECVE-2026-96299: Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-96299/https://agentprime.io/advisories/CVE-2026-96299/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:27:57 GMTCVECVE-2026-96297: MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipelinehttps://agentprime.io/advisories/CVE-2026-96297/https://agentprime.io/advisories/CVE-2026-96297/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:23:57 GMTCVECVE-2026-89099: Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruptionhttps://agentprime.io/advisories/CVE-2026-89099/https://agentprime.io/advisories/CVE-2026-89099/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Sep 2026 17:39:58 GMTCVECVE-2026-82076: Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Serverhttps://agentprime.io/advisories/CVE-2026-82076/https://agentprime.io/advisories/CVE-2026-82076/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:33 GMTCVECVE-2026-82075: Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82075/https://agentprime.io/advisories/CVE-2026-82075/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:32 GMTCVECVE-2026-82074: Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Datahttps://agentprime.io/advisories/CVE-2026-82074/https://agentprime.io/advisories/CVE-2026-82074/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:31 GMTCVECVE-2026-82073: Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Searchhttps://agentprime.io/advisories/CVE-2026-82073/https://agentprime.io/advisories/CVE-2026-82073/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:30 GMTCVECVE-2026-82071: Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Writehttps://agentprime.io/advisories/CVE-2026-82071/https://agentprime.io/advisories/CVE-2026-82071/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:29 GMTCVECVE-2026-82070: Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interfacehttps://agentprime.io/advisories/CVE-2026-82070/https://agentprime.io/advisories/CVE-2026-82070/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:28 GMTCVECVE-2026-82069: Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Routerhttps://agentprime.io/advisories/CVE-2026-82069/https://agentprime.io/advisories/CVE-2026-82069/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:28 GMTCVECVE-2026-82068: Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82068/https://agentprime.io/advisories/CVE-2026-82068/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:27 GMTCVECVE-2026-82067: Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startuphttps://agentprime.io/advisories/CVE-2026-82067/https://agentprime.io/advisories/CVE-2026-82067/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:26 GMTCVEcriticalCVE-2026-82066: Heap Out-of-Bounds Read in MongoDB Server Query Planning Componenthttps://agentprime.io/advisories/CVE-2026-82066/https://agentprime.io/advisories/CVE-2026-82066/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:26 GMTCVECVE-2026-82065: Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadatahttps://agentprime.io/advisories/CVE-2026-82065/https://agentprime.io/advisories/CVE-2026-82065/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:25 GMTCVECVE-2026-82064: Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Membershttps://agentprime.io/advisories/CVE-2026-82064/https://agentprime.io/advisories/CVE-2026-82064/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:24 GMTCVECVE-2026-82063: Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82063/https://agentprime.io/advisories/CVE-2026-82063/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:23 GMTCVECVE-2026-82062: Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypasshttps://agentprime.io/advisories/CVE-2026-82062/https://agentprime.io/advisories/CVE-2026-82062/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:23 GMTCVECVE-2026-82061: Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82061/https://agentprime.io/advisories/CVE-2026-82061/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:22 GMTCVECVE-2026-82060: Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookupshttps://agentprime.io/advisories/CVE-2026-82060/https://agentprime.io/advisories/CVE-2026-82060/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:21 GMTCVECVE-2026-82059: Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82059/https://agentprime.io/advisories/CVE-2026-82059/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:20 GMTCVECVE-2026-82058: Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82058/https://agentprime.io/advisories/CVE-2026-82058/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:19 GMTCVECVE-2026-82057: Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82057/https://agentprime.io/advisories/CVE-2026-82057/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:19 GMTCVECVE-2026-82056: Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82056/https://agentprime.io/advisories/CVE-2026-82056/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:18 GMTCVECVE-2026-82055: Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82055/https://agentprime.io/advisories/CVE-2026-82055/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:17 GMTCVECVE-2026-82054: Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-82054/https://agentprime.io/advisories/CVE-2026-82054/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:17 GMTCVECVE-2026-82053: Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignmenthttps://agentprime.io/advisories/CVE-2026-82053/https://agentprime.io/advisories/CVE-2026-82053/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:16 GMTCVECVE-2026-82052: $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 charshttps://agentprime.io/advisories/CVE-2026-82052/https://agentprime.io/advisories/CVE-2026-82052/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 16:12:15 GMTCVECVE-2026-18712: Improper Authorization in MongoDB Queryable Encryption Maintenance Operations Allows Unauthorized Modification of Other Collectionshttps://agentprime.io/advisories/CVE-2026-18712/https://agentprime.io/advisories/CVE-2026-18712/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:49:28 GMTCVECVE-2026-18711: Use-After-Free in MongoDB Query Execution Engine Leads to Denial of Service and Potential Memory Disclosurehttps://agentprime.io/advisories/CVE-2026-18711/https://agentprime.io/advisories/CVE-2026-18711/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:48:50 GMTCVECVE-2026-18709: Missing Authorization in MongoDB Sharded Transaction Commit/Abort Handling Leads to Cross-Shard Data Inconsistencyhttps://agentprime.io/advisories/CVE-2026-18709/https://agentprime.io/advisories/CVE-2026-18709/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:48:11 GMTCVECVE-2026-18698: Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Commandhttps://agentprime.io/advisories/CVE-2026-18698/https://agentprime.io/advisories/CVE-2026-18698/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:47:34 GMTCVECVE-2026-18690: Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collectionshttps://agentprime.io/advisories/CVE-2026-18690/https://agentprime.io/advisories/CVE-2026-18690/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:47:05 GMTCVECVE-2026-18699: Improper Input Validation in MongoDB Query Planner Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-18699/https://agentprime.io/advisories/CVE-2026-18699/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:46:35 GMTCVECVE-2026-18691: Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposurehttps://agentprime.io/advisories/CVE-2026-18691/https://agentprime.io/advisories/CVE-2026-18691/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:46:02 GMTCVEcriticalCVE-2026-18702: Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settingshttps://agentprime.io/advisories/CVE-2026-18702/https://agentprime.io/advisories/CVE-2026-18702/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:43:59 GMTCVECVE-2026-18694: Out-of-Bounds Read in MongoDB Geospatial Query Processing Leads to Denial of Service and Potential Memory Disclosurehttps://agentprime.io/advisories/CVE-2026-18694/https://agentprime.io/advisories/CVE-2026-18694/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:42:43 GMTCVECVE-2026-18708: Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopeshttps://agentprime.io/advisories/CVE-2026-18708/https://agentprime.io/advisories/CVE-2026-18708/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:41:10 GMTCVECVE-2026-18696: Improper Authorization in MongoDB applyOps Command Handling Allows Unauthorized DDL Operations on Collectionshttps://agentprime.io/advisories/CVE-2026-18696/https://agentprime.io/advisories/CVE-2026-18696/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:40:35 GMTCVECVE-2026-18700: Use-After-Free in MongoDB Geospatial Validation Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-18700/https://agentprime.io/advisories/CVE-2026-18700/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:40:07 GMTCVECVE-2026-18701: Type Confusion in MongoDB Query Subsystem Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-18701/https://agentprime.io/advisories/CVE-2026-18701/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:39:35 GMTCVECVE-2026-18697: Improper Input Validation in MongoDB Aggregation Framework Allows Unauthenticated Denial of Service on mongoshttps://agentprime.io/advisories/CVE-2026-18697/https://agentprime.io/advisories/CVE-2026-18697/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:39:03 GMTCVECVE-2026-18693: Out-of-Bounds Read/Write in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Memory Disclosurehttps://agentprime.io/advisories/CVE-2026-18693/https://agentprime.io/advisories/CVE-2026-18693/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:38:31 GMTCVECVE-2026-18705: Improper Authorization in MongoDB Atlas Vector Search Allows Unauthorized Access to Protected View Datahttps://agentprime.io/advisories/CVE-2026-18705/https://agentprime.io/advisories/CVE-2026-18705/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:37:54 GMTCVECVE-2026-18704: Improper Authorization in MongoDB Aggregation Framework Allows Read-Only User to Perform Unauthorized Write Operationshttps://agentprime.io/advisories/CVE-2026-18704/https://agentprime.io/advisories/CVE-2026-18704/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:37:23 GMTCVECVE-2026-18692: Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-18692/https://agentprime.io/advisories/CVE-2026-18692/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:36:54 GMTCVECVE-2026-18688: Out-of-Bounds Read in MongoDB Aggregation Framework Leads to Denial of Service and Potential Memory Disclosurehttps://agentprime.io/advisories/CVE-2026-18688/https://agentprime.io/advisories/CVE-2026-18688/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:36:21 GMTCVECVE-2026-18695: Improper Input Validation in MongoDB Timeseries Query Processing Leads to Denial of Servicehttps://agentprime.io/advisories/CVE-2026-18695/https://agentprime.io/advisories/CVE-2026-18695/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 18:35:46 GMTCVE