{"id":"CVE-2026-103546","published":"2026-10-05T22:16:56.520","lastModified":"2026-10-06T16:00:36.547","description":"In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mongodb/mongodb-kubernetes/releases/tag/1.13.0","tags":[]}],"exploitRefs":[{"url":"https://github.com/mongodb/mongodb-kubernetes/releases/tag/1.13.0","tags":[]}],"hasPoc":true,"ai":null}