database Archives • Daily CyberSecurity

Critical MongoDB Security Vulnerabilities Require Immediate Patching

MongoDB security vulnerabilities CVE-2026-81525 CVE-2026-81522 flaw architecture

Critical MongoDB Security Vulnerabilities Require Immediate Patching

Do Son August 28, 2026

Discover the details of recent MongoDB security vulnerabilities affecting drivers and BI connectors. Update your systems to patch CVE-2026-81525 and others.

Critical Flaw CVE-2025-49844 (CVSS 10.0) Allows Remote Code Execution in Redis Redis XACKDEL RCE, Google Big Sleep CVE-2023-41056 Redis licensing, AGPL Redis RCE, Lua Use-After-Free CVE-2025-49844

Redis XACKDEL RCE, Google Big Sleep CVE-2023-41056 Redis licensing, AGPL Redis RCE, Lua Use-After-Free CVE-2025-49844

Critical Flaw CVE-2025-49844 (CVSS 10.0) Allows Remote Code Execution in Redis

Do Son October 6, 2025

Redis patched a Critical (CVSS 10.0) RCE flaw (CVE-2025-49844) in Lua scripting. An authenticated attacker can exploit a Use-After-Free bug to gain code execution.

Microsoft Access 2016/2019 Is Nearing End-of-Life Smart App Control blocking Armoury Crate, ROG Ally Defender false positive 2026 Microsoft Zero-Day, Cloud Files UAF Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities

Smart App Control blocking Armoury Crate, ROG Ally Defender false positive 2026 Microsoft Zero-Day, Cloud Files UAF Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities

Microsoft Access 2016/2019 Is Nearing End-of-Life

Do Son September 8, 2025

Microsoft Access 2016 and 2019 will officially lose support on October 14, 2025. Learn why it’s critical to upgrade to a newer version to stay secure.

PostgreSQL Issues Urgent Security Fixes for High-Severity RCE Flaws in Core Utilities PostgreSQL Vulnerabilities CVE-2026-2006 PostgreSQL, security update CVE-2023-5869 - CVE-2025-1094

PostgreSQL Vulnerabilities CVE-2026-2006 PostgreSQL, security update CVE-2023-5869 - CVE-2025-1094

PostgreSQL Issues Urgent Security Fixes for High-Severity RCE Flaws in Core Utilities

Do Son August 18, 2025

A new security update for PostgreSQL fixes three vulnerabilities, including two critical flaws that could lead to remote code execution.

Critical ADOdb Flaw (CVE-2025-54119, CVSS 10.0) in SQLite3 Driver Allows SQL Injection ADOdb SQL Injection, PHP Vulnerability

Critical ADOdb Flaw (CVE-2025-54119, CVSS 10.0) in SQLite3 Driver Allows SQL Injection

Do Son August 5, 2025

A critical SQL injection flaw (CVE-2025-54119, CVSS 10.0) in ADOdb’s SQLite3 driver allows arbitrary SQL execution via improperly escaped table names.

MongoDB Flaws Allow Privilege Escalation & DoS MongoDB Vulnerability CVE-2026-25611 MongoDB zlib vulnerability, CVE-2025-14847 MongoDB Vulnerabilities, Data Access CVE-2024-6376 CVE-2025-0755

MongoDB Vulnerability CVE-2026-25611 MongoDB zlib vulnerability, CVE-2025-14847 MongoDB Vulnerabilities, Data Access CVE-2024-6376 CVE-2025-0755

MongoDB Flaws Allow Privilege Escalation & DoS

Do Son July 8, 2025

MongoDB has patched two flaws: CVE-2025-6713 (CVSS 7.7) allows privilege escalation via $mergeCursors, and CVE-2025-6714 (CVSS 7.5) causes mongos DoS.

MongoDB Hit by Pre-Auth Denial of Service Vulnerability MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085

MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085

MongoDB Hit by Pre-Auth Denial of Service Vulnerability

Do Son June 27, 2025

MongoDB discloses CVE-2025-6710 (CVSS 7.5), a pre-authentication DoS flaw. Crafted JSON inputs can crash servers via stack overflow.

Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing Redis XACKDEL RCE, Google Big Sleep CVE-2023-41056 Redis licensing, AGPL Redis RCE, Lua Use-After-Free CVE-2025-49844

Redis Reintroduces Open-Source AGPL Alongside SSPL Licensing

Do Son May 2, 2025

Redis adopts AGPLv3 alongside its SSPL license, returning to open source for Redis 8. Aims to boost community and address cloud provider concerns.

Hacker Leaks 1.4 Billion Tencent Records: Mobile, Email, and QQ IDs Exposed Tencent Data Leak

Hacker Leaks 1.4 Billion Tencent Records: Mobile, Email, and QQ IDs Exposed

Do Son August 11, 2024

Learn about the massive Tencent data leak involving 1.4 billion records and the exposure of sensitive personal information.