Skip to content
OpenAdvisories

Vendor

cve-search

1 known vulnerabilities.

Products

cve-search 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-59509 Scanner template

    Unauthenticated arbitrary MongoDB collection read in cve-search

    An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attacker can manipulate request parameters controlling the MongoDB collection, projected fields, and regular-expression filters to read arb…

    cve-search cve-search