Skip to content
Threat Feed

Vendor

MongoDB

5 briefs RSS
medium advisory

MongoDB Compass Vulnerability Allows File Manipulation and Potential Code Execution

An anonymous remote attacker can exploit a vulnerability in MongoDB Compass to manipulate files and potentially execute arbitrary code.

Compass vulnerability file-manipulation code-execution
2r 1t
medium advisory

MongoDB Timeseries Collection Vulnerability (CVE-2026-8053)

MongoDB published a security advisory to address CVE-2026-8053, an undefined behavior vulnerability when inserting data with duplicate field names into timeseries collections, affecting versions 5.0.0 through 8.3.1.

MongoDB 8.3.0 +11 mongodb cve-2026-8053 timeseries denial of service
1r 1c
high advisory

MongoDB Multiple Vulnerabilities

An authenticated remote attacker can exploit vulnerabilities in MongoDB to execute arbitrary code, manipulate data, disclose confidential information, or cause a denial-of-service condition.

MongoDB vulnerability code execution data breach denial of service
2r 4t
high advisory

MongoDB Vulnerability Allows Local Code Execution

A local attacker can exploit a vulnerability in MongoDB to execute arbitrary code, potentially leading to privilege escalation and system compromise.

MongoDB code-execution privilege-escalation
2r 2t
high advisory

AWS Identity API Access from Rare ASN Organizations

This rule detects AWS identities with API traffic dominated by cloud-provider source AS organization labels, but also exhibit traffic from other AS organizations, potentially indicating credential reuse or pivoting.

aws cloudtrail initial-access credential-access
2r 1t