CNNVD-202602-1452 Information

CNNVD ID

CNNVD-202602-1452

CVE-2026-25609

  • CNNVD Published: 2026-02-10

Description (Chinese)

MongoDB Server是美国MongoDB公司的一套开源的NoSQL数据库。该数据库提供面向集合的存储、动态查询、数据复制及自动故障转移等功能。 MongoDB Server存在安全漏洞,该漏洞源于配置文件命令验证不正确,可能导致将修改过滤器的请求误判为只读。

Description (English)

MongoDB Server is an open-source NoSQL database for MongoDB in the United States. The database provides a collection-oriented memory, dynamic queries, data replication and automatic downtime transfer. There is a security gap in MongoDB Server, which stems from the incorrect authentication of the configuration file command, which may lead to the misreading of the request to modify the filter to read-only.

Vulnerability Type

其他

Affected Vendor

MongoDB

Published

2026-02-10

Last Modified

2026-02-24

References

https://jira.mongodb.org/browse/SERVER-112952 https://access.redhat.com/security/cve/cve-2026-25609

Patch

https://jira.mongodb.org/browse/SERVER-112952

Share on: