Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
MongoDb Unintended Proxy or Intermediary (Confused Deputy) Vulnerability - CVE-2026-13062 - Vulnerability Database
MongoDb

MongoDb Unintended Proxy or Intermediary (Confused Deputy) Vulnerability - CVE-2026-13062

Medium
Reference: CVE-2026-13062
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-13062
Title: MongoDb Unintended Proxy or Intermediary (Confused Deputy) Vulnerability
Overview:

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.