CVE-2026-120806 | MongoDB Server up to 7.0.47/8.0.36/8.3.15/9.0.6 User Management improper authorization

A vulnerability categorized as problematic has been discovered in MongoDB Server up to 7.0.47/8.0.36/8.3.15/9.0.6. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-120806. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More