8.1Yüksek

CVE-2026-82061Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service

MongoDB MongoDB Server Yayım: 2026-09-08 19:12 (2 ay önce)

Açıklama

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. No user interaction is required.

Zayıflık türü (CWE): CWE-416

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
mongodb	mongodb	8.3.0 – < 8.3.9
MongoDB	MongoDB Server	8.3.0 – < 8.3.9

Kaynaklar ve yamalar

https://jira.mongodb.org/browse/SERVER-130907 Vendor AdvisoryIssue Tracking

CPE eşleşmeleri (NVD) (1)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:* ≥ 8.3.0 < 8.3.9

CVSS puanı

8.1Yüksek

Kaynak: mongodb · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Düşük
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişmez
Gizlilik: Yok
Bütünlük: Yüksek
Erişilebilirlik: Yüksek

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tüm puanlar (4)

cna	CVSS 4.0	7.2Yüksek
cna	CVSS 3.1	8.1Yüksek
cna@mongodb.com	CVSS 4.0	7.2Yüksek
cna@mongodb.com	CVSS 3.1	8.1Yüksek

EPSS (30 günde istismar olasılığı)

0.53%

tüm CVE'lerin %45'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: no
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2026-08-27
Yayımlandı2026-09-08 19:12
IP-DB'ye ulaştı2026-10-24 23:50
Son güncelleme2026-09-16 23:36

Numarayı veren (CNA): mongodb
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — MongoDB

6.5Orta

CVE-2026-104005 29 gün önce

Incorrect authorization in MongoDB Server router for bulk writes to system namespaces

MongoDB MongoDB Server

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregatio…

6.5Orta

CVE-2026-104004 29 gün önce

Collection validators using collation-accepting expressions can crash MongoDB Server on insert

MongoDB MongoDB Server

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated user…

5.4Orta

CVE-2026-103965 29 gün önce

Fixed values in MongoDB Server $bucket stage may be misread as field references

MongoDB MongoDB Server

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output tha…

6.5Orta

CVE-2026-96299 29 gün önce

Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service

MongoDB MongoDB Server

6.5Orta

CVE-2026-96297 29 gün önce

MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline

MongoDB MongoDB Server

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no…

7.5Yüksek

CVE-2026-89099 2 ay önce

Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

MongoDB MongoDB Server

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a …