CVE-2026-6915
No fix known EPSS <1%CVSS 6.3
An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.
Products: mongodb_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 14.04 LTS | mongodb | no fix |
| Ubuntu Pro 16.04 LTS | mongodb | no fix |
| Ubuntu Pro 18.04 LTS | mongodb | no fix |
| Ubuntu Pro 20.04 LTS | mongodb | no fix |