Skip to content

CVE record · 1 source

CVE-2026-120804

CVSS 7.5

A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB.

Vendor: MongoDB
Product: MongoDB Server
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-772
Exposure class: Identity, Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

34

CVE NVD 24h ago

A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB.

A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When processing certain authentication requests, the server fails to properly release an underlying system resource…

CVSS 7.5 CVE-2026-120804 MongoDB