CVE-2026-13068 | MongoDB Server up to 7.0.38/8.0.27/8.2.11/8.3.6 Cursor Termination improper authorization

July 22, 2026 Yanac

A vulnerability classified as problematic has been found in MongoDB Server up to 7.0.38/8.0.27/8.2.11/8.3.6. Impacted is an unknown function of the component Cursor Termination. The manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-13068. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More