Vulnerabilities CVE-2026-18703

CVE-2026-18703

Low

Open

TLP:CLEAR

Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

Details

CVSS Score: 2.3
EPSS Score ⓘ: 0.11%

1.8th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Aug 11, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.