All 5 CVE vulnerabilities found in Compass, with AI-generated Chinese analysis, references, and POCs.
Vendor: Schweitzer Engineering Laboratories, Inc.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-113870 | Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing CWE-116 | 8.8 | High | 2026-10-21 |
| CVE-2026-96750 | Shell script injection via server-supplied database name in Open MongoDB shell CWE-94 | 7.1 | High | 2026-09-24 |
| CVE-2026-9101 | Prototype pollution in csv parsing CWE-1321 | 4.3 | Medium | 2026-05-20 |
| CVE-2025-0280 | HCL Compass is affected by a security vulnerability CWE-257 | 7.5 | High | 2025-09-03 |
| CVE-2018-10604 | SEL Compass 安全漏洞 CWE-276 | 7.8 | - | 2018-07-24 |
All 5 known CVE vulnerabilities affecting Compass with full Chinese analysis, references, and POCs where available.