PT-2026-63463 · Mongodb · Mongodb Server

CVE-2026-13059 · Publicado 2026-07-22 · Atualizado 2026-07-22

NVD

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands in non-apiStrict configurations.

Correção

Enumeração de Fraquezas

CWE-807

Identificadores relacionados

CVE-2026-13059

Produtos afetados

Mongodb Server

Referências · 2

• https://jira.mongodb.org/browse/SERVER-128433 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13059 · Nota de Segurança