CVE-2026-25609 | MongoDB Server up to 7.0.28/8.0.17/8.2.3 authorization

20:11 - 10 Feb 2026
A vulnerability was found in MongoDB Server up to 7.0.28/8.0.17/8.2.3 and classified as critical. This vulnerability affects unknown code. Executing a manipulation can lead to missing authorization. This vulnerability is registered as CVE-2026-25609. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

Article info: