CVE-2026-120805 | MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6 Queryable Encryption improper authorization

A vulnerability was found in MongoDB up to 7.0.47/8.0.36/8.3.15/9.0.6. It has been rated as problematic. Affected is an unknown function of the component Queryable Encryption. The manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-120805. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More