Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
[NEU] [hoch] MongoDB Server: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-09-09 08:39 UTC
- Importiert: 2026-09-10 12:20 UTC
- CVSS: 9.2
- Quelle-ID:
cert_bund - uid_hash:
8f537eddd740bcf365b4a073348a1dfc8ed71ac949d3e5b3ae718883b39f7da0
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
8.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
MEDIUM |
6 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
MEDIUM |
6 |
2026-09-08 |
|||
CRITICAL |
9.2 |
MEDIUM |
5.4 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
8.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7 |
2026-09-08 |
|||
CRITICAL |
9.2 |
MEDIUM |
6 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
8.7 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
MEDIUM |
5.3 |
2026-09-08 |
|||
CRITICAL |
9.2 |
CRITICAL |
9.2 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
MEDIUM |
5.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
8.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
|||
CRITICAL |
9.2 |
HIGH |
7.1 |
2026-09-08 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |