CVE catalog
CVE-2026-13068
UBUNTU-CVE-2026-13068
- Severity
- Low · CVSS 2.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.25% · Oct 25, 2026
An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges to the appropriate namespace.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | mongodb | pro | 1:2.4.6-0ubuntu5 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.6-0ubuntu6 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.8-1ubuntu1 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.8-2 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.9-1 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.9-1ubuntu1 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.9-1ubuntu2 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.4.9-1ubuntu2+esm2 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.6.10-0ubuntu1 | vulnerable |
| Ubuntu | mongodb | pro | 1:2.6.10-0ubuntu1+esm2 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.4.7-1 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.4.7-1ubuntu1 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.4.7-1ubuntu2 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.4.7-1ubuntu4 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.4.14-3ubuntu1 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.4.14-3ubuntu2 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.3-0ubuntu1 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.3-0ubuntu1.1 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.3-0ubuntu1.3 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.3-0ubuntu1.4 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.3-0ubuntu1.4+esm1 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.3-0ubuntu1.4+esm2 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu2 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3 | vulnerable |
| Ubuntu | mongodb | pro | 1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3+esm1 | vulnerable |
| Cpe | mongodb | Not reported | 8.3.7 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Cpe | mongodb | cpe | Not reported | 8.3.7 | Not reported | NVD-CVE-2026-13068 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: