← CVE Intelligence

CVE-2026-87108

Ops Manager Improper Authorization in Daily Host Monitoring Retrieval PUBLISHED

Description (CNA)

An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.

Affected (CNA)

Vendor / productVersions
MongoDB / Ops Manageraffected 7.0.0 through 7.0.23; affected 8.0.0 before 8.0.27

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.