All vulnerabilities

Servers and applications

CVE-2026-82073

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an internal command parameter that can be set by external clients, causing a security check to be…

Severity
High 7.1
Published
8 Sept 2026
Last changed
16 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.3.9
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 8.3.0 before 8.3.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-82073
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-82073