目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2026-13057— $$SEARCH_META 绕过客户端数据授权泄露漏洞

CVSS 5.3 · Medium EPSS 0.36% · P28

Affected Version Matrix 3

ベンダープロダクトVersion Rangeステータス
MongoDBMongoDB Server8.0< 8.0.28affected
8.3.0< 8.3.7affected
8.2.0< 8.2.12affected
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2026-13057の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
Authorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauthorized Collection Data Through $$SEARCH_META
ソース: CVE Program / CVE List V5
脆弱性説明
An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due to insufficient input validation, an authenticated client can supply these fields directly.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
输入验证不恰当
ソース: CVE Program / CVE List V5

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
MongoDBMongoDB Server 8.0 ~ 8.0.28 -

II. CVE-2026-13057の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2026-13057のインテリジェンス情報

请登录查看更多情报信息。

CVE-2026-13057 厂商安全公告 (1)

Same Patch Batch · MongoDB · 2026-07-22 · 26 CVEs total

CVE-2026-130598.1 HIGHImproper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Contr
CVE-2026-130728.1 HIGHMongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memo
CVE-2026-148817.8 HIGHCompass connection import allows to override OIDC browser open command (usually set throug
CVE-2026-130787.7 HIGHLocal File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader
CVE-2026-130777.1 HIGHOut-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data
CVE-2026-130587.1 HIGHTransaction Command Insufficient Input Validation Leading to Process Termination
CVE-2026-130556.5 MEDIUMServer crash via aggregation pipeline expression with compound wildcard index specificatio
CVE-2026-130696.5 MEDIUMQueryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaus
CVE-2026-130626.5 MEDIUMMongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Command
CVE-2026-130606.5 MEDIUM$graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Col
CVE-2026-130666.5 MEDIUMServer-Side JavaScript DBPointer BSON Serialization Memory Disclosure
CVE-2026-130756.5 MEDIUM$rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generatio
CVE-2026-130656.5 MEDIUMMongoDB $linearFill Window Function Improper Input Validation Leading to Process Terminati
CVE-2026-97376.5 MEDIUMFind command with $meta sort can lead to crash
CVE-2026-130646.5 MEDIUMMongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
CVE-2026-130766.5 MEDIUMAggregation Framework Memory Exhaustion Leading to Process Termination
CVE-2026-130566.5 MEDIUMA user with read access can cause a DoS by executing a specifically crafted query to consu
CVE-2026-130716.5 MEDIUMServer-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termi
CVE-2026-130676.3 MEDIUMtlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket
CVE-2026-130705.3 MEDIUMImproper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Term

Showing 20 of 26 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: MongoDB Server
同じベンダー: MongoDB
同じ弱点: CWE-20

V. CVE-2026-13057へのコメント

まだコメントはありません

コメントを残す