Zurück zur CVE-Übersicht
CVE-2026-82067
HIGH(8.1)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Risk Signal Score20/100 — NIEDRIG
- CVSS 8.1 — Hoch
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.5%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
8.1
Technische Schwere
Beschreibung
Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.
Betroffene Produkte
- cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
- cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
- cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*