CVE-2026-6915General(mongodb / mongodb)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

mongodb CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://jira.mongodb.org/browse/SERVER-119679

Weakness type (CWE)

CWE-1284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mongodb

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

mongodb

Products

mongodb

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-6915

Full discourse1 post

CVE@CVEnew163d
General
CVE-2026-6915 An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another us… https://www.cve.org/CVERecord?id=CVE-2026-6915
Post summary
The text briefly describes an authorization flaw in a user management command that could let authenticated users modify authentication data of other users, but provides no evidence of exploitation, patches, or a PoC.
00000112
57.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mongodb	mongodb	-	-	-

Explore more

Back to dashboard mongodb CVEs mongodb vulnerabilities