Zurück zur CVE-Übersicht
CVE-2026-84962
MEDIUM(4.2)CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
Risk Signal Score11/100 — NIEDRIG
- CVSS 4.2 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.1%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
4.2
Technische Schwere
Beschreibung
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption.
Betroffene Produkte
- cpe:2.3:a:mongodb:libmongocrypt:*:*:*:*:*:*:*:*