Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um beliebigen Programmcode auszuführen.
[UPDATE] [hoch] MongoDB: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-16 09:52 UTC
- Importiert: 2026-10-19 10:44 UTC
- CVSS: 9.0
- Quelle-ID:
cert_bund - uid_hash:
3f1ec95456f17dd63702813d7881a687ea4c5e097f7ed9dcdd215afe679edeca
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
8.1 |
2026-08-11 |
|||
CRITICAL |
9 |
CRITICAL |
9 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
8.8 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.6 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
8.7 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
5.4 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
6.5 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
6.5 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
6.4 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
4.2 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.5 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
5.3 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
6.4 |
2026-08-11 |
|||
CRITICAL |
9 |
MEDIUM |
6.4 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
8.2 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
7.1 |
2026-08-11 |
|||
CRITICAL |
9 |
HIGH |
8.1 |
2026-08-11 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| VENDOR | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |