Vulnerability Bulletins |
CVE-2026-63497 |
|
| Affected software | MONGODB |
| titra is an open source time tracking project. In versions 1.0.3 and prior, authenticated API users can abuse the customfields object to inject or overwrite top-level fields in MongoDB documents. At time of publication, there are no publicly known patches. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-63497 | |