CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

[
  {
    "vendor": "MongoDB",
    "product": "MongoDB Server",
    "versions": [
      {
        "status": "affected",
        "version": "8.3.0",
        "lessThan": "8.3.9",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "8.0.0",
        "lessThan": "8.0.30",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.0.41",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]