Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Incorrect Authorization Vulnerability - CVE-2026-13061 - Vulnerability Database
MongoDb

MongoDb Incorrect Authorization Vulnerability - CVE-2026-13061

Medium
Reference: CVE-2026-13061
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-13061
Title: MongoDb Incorrect Authorization Vulnerability
Overview:

An authenticated user may be able to view session metadata belonging to other users on the system through the listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges and includes active session identifiers associated usernames and activity timestamps.