This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-18705 | BDVDB-2026-357299 Detail

MongoDBMongoDB Server

Description#

An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection. This is due to insufficient handling of certain user-supplied fields when constructing an internal request forwarded to the search process.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-807 Reliance on Untrusted Inputs in a Security Decision

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.