PT-2026-63472 · Mongodb · Mongodb Server

CVE-2026-13068 · Publicado 2026-07-22 · Atualizado 2026-07-22

Mitre

CVSS v3.1

4.2

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-13068

Produtos afetados

Mongodb Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-13068 · Nota de Segurança
• https://jira.mongodb.org/browse/SERVER-128198 · Nota