CVE-2026-18703

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue exists where a party possessing a valid client certificate and a corresponding user account can authenticate using certificate-based authentication. This occurs even if an administrator has configured the server to restrict authentication to other mechanisms, effectively bypassing the intended authentication restrictions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.