4 matches found
BIT-MONGODB-2026-9747 Crafted cross-shard merge aggregation crashes MongoDB Server
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server...
7.1CVSS5.2AI score0.0027EPSS
SaveExploits0References2
CVE-2026-9747 Crafted cross-shard merge aggregation crashes MongoDB Server
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server...
7.1CVSS5.4AI score0.0027EPSS
SaveExploits0References1
CVE-2026-9747
The vulnerability CVE-2026-9747 affects MongoDB Server’s cross-shard merge aggregation. When building aggregations, using fromRouter:true with runtimeConstants.userRoles may cause the server to crash. The connected documentation confirms the issue but provides no details on mitigations; exploitat...
7.1CVSS5.5AI score0.0027EPSS
SaveExploits0References1Affected Software1
20