6.5Mittel

CVE-2026-104004Collection validators using collation-accepting expressions can crash MongoDB Server on insert

MongoDB MongoDB Server Veröffentlicht: 2026-10-13 18:36 (vor 29 Tagen)

Beschreibung

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.

Schwachstellentyp (CWE): CWE-476

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
MongoDB	MongoDB Server	8.3.0 – < 8.3.13, 8.0 – < 8.0.34, 9.0 – < 9.0.4

Referenzen und Patches

https://jira.mongodb.org/browse/SERVER-131412

CVSS-Score

6.5Mittel

Quelle: mongodb · CVSS 3.1

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Niedrig
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Keine
Integrität: Keine
Verfügbarkeit: Hoch

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Alle Scores (4)

cna	CVSS 4.0	7.1Hoch
cna	CVSS 3.1	6.5Mittel
cna@mongodb.com	CVSS 4.0	7.1Hoch
cna@mongodb.com	CVSS 3.1	6.5Mittel

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.24%

höher als 15 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: partial

Zeitverlauf

ID reserviert2026-10-01
Veröffentlicht2026-10-13 18:36
Bei IP-DB eingegangen2026-10-24 23:48
Zuletzt aktualisiert2026-10-15 23:38

Vergeben von (CNA): mongodb
NVD-Status: Awaiting Analysis

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — MongoDB

6.5Mittel

CVE-2026-104005 vor 29 Tagen

Incorrect authorization in MongoDB Server router for bulk writes to system namespaces

MongoDB MongoDB Server

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregatio…

5.4Mittel

CVE-2026-103965 vor 29 Tagen

Fixed values in MongoDB Server $bucket stage may be misread as field references

MongoDB MongoDB Server

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output tha…

6.5Mittel

CVE-2026-96299 vor 29 Tagen

Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service

MongoDB MongoDB Server

6.5Mittel

CVE-2026-96297 vor 29 Tagen

MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline

MongoDB MongoDB Server

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no…

7.5Hoch

CVE-2026-89099 vor 2 Monaten

Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

MongoDB MongoDB Server

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a …

6.5Mittel

CVE-2026-82076 vor 2 Monaten

Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server

MongoDB MongoDB Server

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume me…