UpHeron
All vulnerabilities

Servers and applications

CVE-2026-82053

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the expected one. This can result in incorrect role assignments based on the LDAP directory's access control…

Severity
High 7.6
Published
8 Sept 2026
Last changed
16 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.0.41, 8.0.30, 8.3.9
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 7.0.0 before 7.0.41
  • From 8.0.0 before 8.0.30
  • From 8.2.0 up to 8.2.12
  • From 8.3.0 before 8.3.9
  • Version 9.0.0-alpha0
  • Version 9.0.0-alpha1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-82053
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-82053