Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability - CVE-2026-13059 - Vulnerability Database
MongoDb

MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability - CVE-2026-13059

High
Reference: CVE-2026-13059
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-13059
Title: MongoDb Reliance on Untrusted Inputs in a Security Decision Vulnerability
Overview:

An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls due to insufficient validation of certain client-supplied command parameters. The issue affects find update delete and aggregate commands in non-apiStrict configurations.