An issue in MongoDB Server’s Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.
2026年9月4日
CVE-2026-18712 [HIGH] – An issue in MongoDB Server’s Queryable Encryption maintenance operations could allow an au
📑 文章目录



