All vulnerabilities
CVE-2026-103546

Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

MongoDB, Inc. Mongodb Controllers for KubernetesDatabases
Open in ThreatlineRecord JSON
CVSS
2.3Low
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.13.0Fixed versionCVE List
Published5 Oct 2026Updated 6 Oct 2026CVE List

What fixes it

  • 1.13.0Mongodb Controllers for KubernetesCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation.

Text from CVE List

Affected versions 1

  • Mongodb Controllers for Kubernetesaffected: all versions before 1.13.0CVE List

References 1