https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:46:13 +0000 https://vulnerability.circl.lu/vuln/cve-2026-96750 <p><strong>Affected:</strong> MongoDB Compass</p> <p>MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database&#39;s view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have content evaluated as shell input within the Compass process, with that process&#39;s privileges. This requires the Compass user to open the shell for the affected database.</p> <p><strong>Affected:</strong> MongoDB Compass</p> <p>MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database&#39;s view. A user with privileges to create databases on a server that a Compass user connects to may, under specific conditions, have content evaluated as shell input within the Compass process, with that process&#39;s privileges. This requires the Compass user to open the shell for the affected database.</p> https://vulnerability.circl.lu/vuln/cve-2026-96750