CVE-2026-19503

score

0.1

cvss

4.8

epss

0.2%

published

2026-08-12

kev added

—

first seen

2026-10-21

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver contain an open redirect vulnerability caused by lack of validation of authorization and token endpoint schemes in OIDC discovery documents, letting attackers dispatch uncontrolled URIs to the user's OS protocol handler, potentially exposing credentials or enabling code execution, exploit requires user to connect to a malicious MongoDB deployment.