Skip to content
OpenAdvisories
Medium WID-SEC-2026-1321 2 CVEs

MongoDB: Mehrere Schwachstellen

Published Apr 29, 2026 · Updated Jul 15, 2026 · Revision 2 · de-DE

Vendor: Splunk Product: Enterprise Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um einen Denial of Service Angriff durchzuführen, und um Daten zu manipulieren.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 2

  • Medium 6.5
    CVE-2026-6914

    MD5 checksum creation may cause availability loss

    Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.3
    CVE-2026-6915

    Flaw in the updateUser Command May Allow Unauthorized Configuration Change

    An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

    MongoDB MongoDB Server mongodb Ubuntu

Revision history

  1. #2

    Neue Updates von Splunk-SVD aufgenommen

  2. #1

    Initiale Fassung

References