CVE-2026-120814 | MongoDB Server up to 8.0.36/8.3.15/9.0.6 Sharding Subsystem privileges management

A vulnerability labeled as very critical has been found in MongoDB Server up to 8.0.36/8.3.15/9.0.6. This affects an unknown part of the component Sharding Subsystem. Such manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-120814. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More