Alert GCSA-26307 - Vulnerabilita' in prodotti MongoDB

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** alert ID: GCSA-26307 data: 5 novembre 2026 titolo: Vulnerabilita' in prodotti MongoDB ****************************************************************** :: Descrizione del problema MongoDB ha rilasciato nuove versioni di alcuni prodotti, per risolvere 15 vulnerabilita', delle quali 4 con gravita' "alta". Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato MongoDB Node.js Driver MongoDB Database Tools Rust Driver MongoDB C Driver MongoDB Atlas SQL JDBC Driver Entity Framework Core Provider :: Impatto Denial of Service (DoS) Accesso a dati riservati (ID) Bypass delle funzionalita' di sicurezza (SFB) Acquisizione di privilegi piu' elevati (EoP) :: Soluzione Aggiornare i prodotti alle ultime versioni. :: Riferimenti MongoDB Alerts https://www.mongodb.com/resources/products/alerts#security https://jira.mongodb.org/browse/NODE-7958 https://github.com/mongodb/mongo-tools/blob/master/CHANGELOG.md https://jira.mongodb.org/browse/RUST-2525 https://jira.mongodb.org/browse/CDRIVER-6521 https://jira.mongodb.org/browse/CDRIVER-6508 https://jira.mongodb.org/browse/CDRIVER-6501 https://jira.mongodb.org/browse/CDRIVER-6494 https://jira.mongodb.org/browse/CDRIVER-6420 https://www.mongodb.com/docs/sql-interface/changelog/ https://jira.mongodb.org/browse/EF-478 https://jira.mongodb.org/browse/SQL-3539 Mitre CVE https://www.cve.org/CVERecord?id=CVE-2026-119179 https://www.cve.org/CVERecord?id=CVE-2026-119675 https://www.cve.org/CVERecord?id=CVE-2026-119672 https://www.cve.org/CVERecord?id=CVE-2026-119673 https://www.cve.org/CVERecord?id=CVE-2026-119674 https://www.cve.org/CVERecord?id=CVE-2026-120673 https://www.cve.org/CVERecord?id=CVE-2026-120678 https://www.cve.org/CVERecord?id=CVE-2026-120684 https://www.cve.org/CVERecord?id=CVE-2026-120956 https://www.cve.org/CVERecord?id=CVE-2026-120955 https://www.cve.org/CVERecord?id=CVE-2026-120954 https://www.cve.org/CVERecord?id=CVE-2026-120953 https://www.cve.org/CVERecord?id=CVE-2026-120567 https://www.cve.org/CVERecord?id=CVE-2026-120952 https://www.cve.org/CVERecord?id=CVE-2026-120959 GARR CERT Security Alert - subscribe/unsubscribe: https://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCauyCSwAKCRDBnEyTZRJg Qlz8AKDSYPkJAHN4mA1IzDRyY1miTqZOygCgy6Nk6J1IFazXulrvJY8NgztiBBk= =yktt -----END PGP SIGNATURE-----