CVE-2026-96299

A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization...

CVE-2026-96299

The MongoDB Server is vulnerable to a memory exhaustion (OOM ) condition due to missing resource limits in the match expression evaluator . The flaw allows an authenticated user with read-only privileges to execute an aggregation query using nested internal schema validation operators (intended f...

EUVD-2026-98812

A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization...