CVE-2026-87108 | CVSS: 3.1 | 严重级别: LOW
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
参考链接:
• https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#ops-
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。