CVE-2026-87108lowCWE-639

CVE-2026-87108: falha de baixa gravidade em MongoDB Ops Manager

Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

Publicada em

Seguir esta CVE+ Monitorar MongoDB Ops Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.3epss 0.1%
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
MongoDB · Ops Manager
CVEs relacionadas — MongoDB Ops Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2026-87110MEDIUMOps Manager Uncontrolled Resource Consumption in Monitoring EndpointsEPSS 0.3%CVE-2026-87109MEDIUMOps Manager Sensitive MFA Enrollment Information Exposure in User ListingsEPSS 0.2%