Threats Tagged 'cve-2026-13078'
View all threats tagged with 'cve-2026-13078'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-13078'
Click on any threat for detailed analysis and mitigation recommendations
0 A local file disclosure vulnerability exists in MongoDB Server's MozJS scripting engine module loader. This flaw allows authenticated users to read arbitrary files on the host filesystem with the privileges of the mongod process by exploiting a module loading hook via crafted aggregation pipeline commands. The issue affects multiple MongoDB versions prior to patched releases. A fix is available to address this vulnerability. Join the discussion | GCVE Database | 08/19/2026, 08:49:31 UTC Added: 07/22/2026, 23:23:06 UTC |
CVE-2026-13078 is a medium severity vulnerability in MongoDB Server where the server-side MozJS scripting engine registers a module loading hook that allows JavaScript code to read arbitrary files on the host filesystem with the privileges of the mongod process. An authenticated user can exploit this by sending crafted aggregation pipeline commands to read sensitive files accessible to the MongoDB server process. No official patch or remediation guidance is currently provided. Join the discussion | CVE Database V5 | 07/22/2026, 19:11:20 UTC Added: 07/22/2026, 20:08:01 UTC |
Showing 1 to 2 of 2 results