Lucene search
+L

63 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-82057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom...

7.1CVSS5.7AI score0.00296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-82058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON...

7.1CVSS5.7AI score0.00283EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/08 5:18 p.m.8 views

CVE-2026-82058

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS0.00283EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 5:18 p.m.11 views

CVE-2026-82055

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

7.1CVSS0.00283EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 4:12 p.m.20 views

CVE-2026-82058

MongoDB 's mongod server is vulnerable to a denial-of-service flaw in its JSON Schema validation error generation code. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error path performs an unsafe numeric conversion on t...

7.1CVSS5.7AI score0.00283EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/09/08 4:12 p.m.8 views

EUVD-2026-72945

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.7AI score0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/08 4:12 p.m.9 views

CVE-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.7AI score0.00283EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/09/08 4:12 p.m.8 views

Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

7.1CVSS5.7AI score0.00283EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/07/22 8:16 p.m.42 views

CVE-2026-13073

An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...

5.3CVSS0.00217EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/22 8:16 p.m.16 views

CVE-2026-13065

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...

7.1CVSS0.00497EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/22 8:16 p.m.17 views

CVE-2026-13058

An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent validation across related transaction command parameters, resulting in a fat...

7.1CVSS0.0023EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/22 8:16 p.m.12 views

UBUNTU-CVE-2026-13065

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...

7.1CVSS5.9AI score0.00497EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/22 8:16 p.m.11 views

UBUNTU-CVE-2026-13073

An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for all connected clients until the process is restarted. The issue stems from an internal engine selection inconsistency...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/22 8:16 p.m.10 views

UBUNTU-CVE-2026-13071

An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing...

7.1CVSS6AI score0.00251EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/07/22 8:16 p.m.17 views

CVE-2026-13065

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort...

7.1CVSS5.5AI score0.00497EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/07/22 8:16 p.m.19 views

CVE-2026-13063

An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...

6.5CVSS5.4AI score0.0023EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/22 7:21 p.m.20 views

EUVD-2026-47777

An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent validation across related transaction command parameters, resulting in a fat...

7.1CVSS5.3AI score0.0023EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/22 7:18 p.m.26 views

EUVD-2026-47798

An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...

5.3CVSS5.3AI score0.0023EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/22 7:18 p.m.12 views

CVE-2026-13063 libmongocrypt Improper Input Validation Leading to Process Termination

An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...

5.3CVSS5.3AI score0.0023EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/07/22 7:18 p.m.120 views

CVE-2026-13063

An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. MongoDB's libmongocrypt library insufficiently validates payload-supplied values, which can result in an excessively larg...

5.3CVSS5.3AI score0.0023EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder