CVE-2026-120804 | MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6 SSPI Kerberos Authentication resource consumption

A vulnerability identified as problematic has been detected in MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6. Affected by this issue is some unknown functionality of the component SSPI Kerberos Authentication Handler. This manipulation causes resource consumption.

This vulnerability is handled as CVE-2026-120804. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More