CVE ID :CVE-2026-106433 Published : Oct. 8, 2026, 6:55 p.m. | 34 minutes ago Description :Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-106433 - Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt

VERWANDTEARTIKEL

USN-8910-1: libxml2 vulnerabilities

CVE-2026-107704 - image_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format

CVE-2026-107701 - dot-access through 1.0.0 Prototype Pollution via set() path argument

CVE-2026-107703 - @enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo

CVE-2026-107699 - ppt2png through 0.0.6 OS Command Injection via input and output paths

CVE-2026-107700 - dot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument