CVE-2026-104005Medium· 4.3▾ SunlitIncorrect authorization in the write routing component of the MongoDB Server sharded cluster router can cause bulk write operations to skip authorization checks for the target namespace. An authenticated user with write privileges on a r…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Incorrect authorization in the write routing component of the MongoDB Server sharded cluster router can cause bulk write operations to skip authorization checks for the target namespace. An authenticated user with write privileges on a regular collection who submits a bulk write that targets an internal system namespace may have the operation accepted by the router even though they are not authorized to write to that namespace. The resulting impact depends on the system namespace targeted.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-67740Low· 2.7In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata
CVE-2020-3578Medium· 5.3A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass a configured access rule and ac…
CVE-2024-6593Critical· 9.1Incorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained netwo…
CVE-2024-46918Medium· 4.9app/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.
CVE-2026-102832Medium· 4.2JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture
CVE-2026-103028Medium· 4.3SFTPGo is an open source, event-driven file transfer solution