Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-18703

Опубликовано: 11 авг. 2026
Источник: debian
EPSS Низкий

Описание

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mongodbremovedpackage

EPSS

Процентиль: 2%
0.00115
Низкий

Связанные уязвимости

CVSS3: 4.2
nvd
около 1 месяца назад

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

CVSS3: 4.2
github
около 1 месяца назад

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

EPSS

Процентиль: 2%
0.00115
Низкий