Skip to content
OpenAdvisories

Product · MongoDB

Ops Manager

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-87109

    Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings

    An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to …

    MongoDB Ops Manager
  • Medium 5.3
    CVE-2026-87110

    Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints

    An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.

    MongoDB Ops Manager