Is CVE-2026-75159 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-75159?

CVE-2026-75159 has a CVSS v3 severity of MEDIUM (5.9).

Back

CVE-2026-75159

Description

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until the process restarts.