← Πίσω στην αναζήτηση CVE

CVE-2026-18712

Περιγραφή

An issue in MongoDB Server-s Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.

CVSS 8.1EPSS 0%Κίνδυνος 0.81
Προβολή πηγής
Δημοσίευση
2026-08-11 19:17:29
Τελευταία τροποποίηση
2026-08-11 21:17:34
Διάνυσμα
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H