Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb,_inc.:ops_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMongodb, Inc. (8b5c87c2-3d1f-5f22-86c2-8e3d53f5a3ce)
ProductOps Manager (3af99e81-439d-5c5d-aa11-f9f770137554)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8431 vulnerable 2026-06-08 08:08:58.369634 Ops Manager RCE via webhook body
HIGH (7.2)
An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax.  This issue affects all MongoDB Ops Manager 7.0 versions and MongoDB Ops Manager versions 8.0.22 and prior.
Published: 2026-05-12T18:37:47.687Z
Updated: 2026-05-12T20:24:26.765Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.