CVE-2026-120808 | MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6 TLS Client certificate validation

November 10, 2026 Yanac

A vulnerability identified as problematic has been detected in MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6. This impacts an unknown function of the component TLS Client. The manipulation leads to improper certificate validation.

This vulnerability is uniquely identified as CVE-2026-120808. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More