» Tag

mongodb

1 posts

«August 2026

Aug 12, 20268.01
MongoDB BSON Symbol Type Bypasses Authorization Check (CVE-2026-18690)
MongoDB CVE-2026-18690: a BSON symbol-typed collection name bypasses authorization checks, letting limited users reach protected system collections.
authorization-bypass cve-2026-18690 cwe-863 database-security
Ad
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.com