{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Laravel MongoDB versions ant\u00e9rieures \u00e0 5.12.0","product":{"name":"Laravel MongoDB","vendor":{"name":"MongoDB","scada":false}}},{"description":"Java Driver versions ant\u00e9rieures \u00e0 5.14.0","product":{"name":"Java Driver","vendor":{"name":"MongoDB","scada":false}}},{"description":"Database Tools versions ant\u00e9rieures \u00e0 100.20.0","product":{"name":"Database Tools","vendor":{"name":"MongoDB","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2026-116641","url":"https://www.cve.org/CVERecord?id=CVE-2026-116641"},{"name":"CVE-2026-118510","url":"https://www.cve.org/CVERecord?id=CVE-2026-118510"},{"name":"CVE-2026-118581","url":"https://www.cve.org/CVERecord?id=CVE-2026-118581"}],"links":[],"reference":"CERTFR-2026-AVI-1430","revisions":[{"description":"Version initiale","revision_date":"2026-10-30T00:00:00.000000"}],"risks":[{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Injection SQL (SQLi)"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits MongoDB. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es, une injection SQL (SQLi) et un contournement de la politique de s\u00e9curit\u00e9.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits MongoDB","vendor_advisories":[{"published_at":"2026-10-28","title":"Bulletin de s\u00e9curit\u00e9 MongoDB r5.14.0","url":"https://github.com/mongodb/mongo-java-driver/releases/tag/r5.14.0"},{"published_at":"2026-10-28","title":"Bulletin de s\u00e9curit\u00e9 MongoDB dbtools-100.20.0-changelog","url":"https://www.mongodb.com/docs/database-tools/release-notes/dbtools-100.20.0-changelog/"},{"published_at":"2026-10-28","title":"Bulletin de s\u00e9curit\u00e9 MongoDB 5.12.0","url":"https://github.com/mongodb/laravel-mongodb/releases/tag/5.12.0"}]}