CVE-2026-6915 | BDVDB-2026-329587 Detail
MongoDBMongoDB Server
Description#
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-1284 Improper validation of specified quantity in input
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.