Lucene search
+L

6 matches found

OSV
OSV
added 2026/06/16 11:48 a.m.8 views

BIT-MONGODB-2026-9750 Metadata name collision on $-prefixed fields causes post-auth server crash

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain...

7.1CVSS5.7AI score0.00368EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/06/09 10:17 p.m.9 views

CVE-2026-9750 Metadata name collision on $-prefixed fields causes post-auth server crash

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain...

7.1CVSS5.7AI score0.00368EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/09 10:17 p.m.42 views

CVE-2026-9750 Metadata name collision on $-prefixed fields causes post-auth server crash

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain...

7.1CVSS0.00368EPSS
Exploits0References1
OSV
OSV
added 2026/06/09 10:17 p.m.1 views

CVE-2026-9750 Metadata name collision on $-prefixed fields causes post-auth server crash

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain...

7.1CVSS6.1AI score0.00368EPSS
Exploits0References3
CVE
CVE
added 2026/06/09 10:17 p.m.37 views

CVE-2026-9750

CVE-2026-9750 affects MongoDB: an authenticated user can cause a server crash or incorrect query results by crafting documents that clash with internal metadata during query execution. The root cause is insufficient separation between user-controlled document fields and internal metadata in certa...

7.1CVSS5.7AI score0.00368EPSS
Exploits0References1Affected Software1
MongoDB
MongoDB
added 2026/06/09 10:17 p.m.10 views

Metadata name collision on $-prefixed fields causes post-auth server crash

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain...

7.1CVSS5.7AI score0.00368EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder