CVE-2026-82073

score

0.3

cvss

6.5

epss

0.4%

published

2026-09-08

kev added

—

first seen

2026-10-21

MongoDB Server contains a broken access control caused by insufficient validation of internal command parameters in the aggregation framework with Atlas Search, letting authenticated users with limited read privileges bypass view-level authorization checks and access unauthorized data, exploit requires authentication.