MEDIUMCVSS v3.1 6.5Vulnerability
CVE-2026-120826
An authorization flaw in the aggregation and view-definition handling of sharded deployments may allow a user holding only basic read-write privileges on a single database to define a view whose underlying processing is not fully subjected to privilege checking. Reading that view may result in unintended access to data belonging to other databases held on the same shard.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Cvss severity
- MEDIUM
- Cvss score
- 6.5
- Retrieved at
- 2026-11-10T23:34:23+00:00
- Score
- 6.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-120826
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- First seen by Signal
- 2026-11-10T23:31:41+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Published at
- 2026-11-10T21:19:02.517
- Last modified
- 2026-11-10T22:08:59.707
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph