CVE-2026-13059
HIGH
NVD
CVSS Score
8.1
Severity
HIGH
Published
Jul 22, 2026
Vendor
unknown
Description
An authenticated user with low privileges may be able to perform unauthorized reads and writes on data protected by role-based query-level access controls, due to insufficient validation of certain client-supplied command parameters. The issue affects find, update, delete, and aggregate commands in non-apiStrict configurations.