CVE-2026-103965

Publié : 13 octobre 2026

Modifié : 13 octobre 2026

Score CVSS

5.4

MEDIUM

Description détaillée

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Références et Patchs

https://jira.mongodb.org/browse/SERVER-134618

Dernières Vulnérabilités

CVE-2026-97844

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

VOIR DÉTAILS

CVE-2026-97843

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

VOIR DÉTAILS

CVE-2026-97842

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

VOIR DÉTAILS