Denial of Service Vulnerability in MongoDB Ops Manager
CVE-2026-87110

6.9MEDIUM

Key Information:

Vendor

Mongodb

Vendor
CVE Published:
9 October 2026

What is CVE-2026-87110?

The MongoDB Ops Manager contains a vulnerability that allows unauthenticated users with network access to exploit monitoring endpoints. By sending repeated requests without rate limiting, an attacker can initiate extensive resource usage, potentially leading to service disruption. This vulnerability can slow down or hinder other legitimate traffic handled by the affected process, creating unavailability for users relying on the Ops Manager services.

Affected Version(s)

Ops Manager 7.0.0 <= 7.0.23

Ops Manager 8.0.0 < 8.0.27

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.