CVE-2026-18690 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 improper authorization

A vulnerability, which was classified as critical, was found in MongoDB Server up to 7.0.39/8.0.28/8.3.7. This vulnerability affects unknown code. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-18690. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.