A BSON symbol namespace bypasses MongoDB's authorization check (CVE-2026-18690) | Dark Hacker News