CVE-2026-82067 | BDVDB-2026-370322 Detail

Description#

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-08Record published in the CVE List.