← Zurück zur CVE-Suche

CVE-2026-14881

MongoDB Compass

Beschreibung

When importing connections in Compass it is possible to override some connection options that are otherwise can-t be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

CVSS 7.8EPSS 0.152%Risiko 0.79
Quelle öffnen
Veröffentlicht
2026-07-22 20:16:48
Betroffene Versionen
unknown
Typ
Kritische Software
Zuletzt geändert
2026-07-24 05:16:38
Vektor
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H