← CVE Intelligence

CVE-2026-25609

profile command may permit unauthorized configuration PUBLISHED

Description (CNA)

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

Affected (CNA)

Vendor / productVersions
MongoDB Inc / MongoDB Serveraffected 8.2 before 8.2.4; affected 8.0 before 8.0.18; affected 7.0 before 7.0.29

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.