EXEO Threat Intelligence

Threat advisories that tell you what to do next

Curated, de-identified advisories powered by Argos. What the threat is, who is exposed, and the actions that reduce your risk.

Discover Argos Browse advisories

Access control vulnerability in aggregation framework of MongoDB Server (CVE-2026-120825)

An authorization weakness in the aggregation framework of MongoDB Server may allow an authenticated user holding only basic database privileges to read the contents of collections in a database for which they have not been granted read access. The privilege evaluation performed while a view definition is validated does not cover a nested portion of the supplied pipeline, so the resulting view returns data the user is otherwise refused.

Read More >
MEDIUMNovember 10, 2026

Denial-of-service vulnerability in MongoDB Server (CVE-2026-82064)

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion’s assumptions about internal state do not hold for all member configurations, causing the server process to terminate.

Read More >
HIGHSeptember 8, 2026
Exeo Logo White Transparent

Get in touch

We respond within 1 hour on weekdays

This channel is not monitored by HR. For a job application or an internship, please visit our Join Us page.