Is CVE-2026-13062 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-13062?

CVE-2026-13062 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-13062

Description

An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.