{"kind": "product", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "name": "mongodb", "product": "mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS", "items": [{"id": "CVE-2026-104005", "noindex": false, "published": "2026-10-13T15:38:42.407Z", "modified": "2026-10-15T19:14:57.316Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-104005", "title": "Incorrect authorization in MongoDB Server router for bulk writes to system namespaces", "description": "A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization checks despite being intended for internal use, allowing a subsequent stage to be forced to execute on the router under conditions it was not designed to handle. This results in an unhandled fatal error that causes the mongos process to immediately abort, resulting in denial of service for all clients routed through the affected mongos instance.", "references": ["https://jira.mongodb.org/browse/SERVER-131411", "https://nvd.nist.gov/vuln/detail/CVE-2026-104005"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-104004", "noindex": false, "published": "2026-10-13T15:36:14.952Z", "modified": "2026-10-15T19:14:57.446Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-104004", "title": "Collection validators using collation-accepting expressions can crash MongoDB Server on insert", "description": "MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.", "references": ["https://jira.mongodb.org/browse/SERVER-131412", "https://nvd.nist.gov/vuln/detail/CVE-2026-104004"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-103965", "noindex": false, "published": "2026-10-13T15:33:20.112Z", "modified": "2026-10-13T16:20:06.145Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.0015, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-103965", "title": "Fixed values in MongoDB Server $bucket stage may be misread as field references", "description": "An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return.", "references": ["https://jira.mongodb.org/browse/SERVER-134618", "https://nvd.nist.gov/vuln/detail/CVE-2026-103965"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-96299", "noindex": false, "published": "2026-10-13T15:27:57.250Z", "modified": "2026-10-13T16:31:19.871Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00235, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-96299", "title": "Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service", "description": "A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization checks despite being intended for internal use, allowing a subsequent stage to be forced to execute on the router under conditions it was not designed to handle. This results in an unhandled fatal error that causes the mongos process to immediately abort, resulting in denial of service for all clients routed through the affected mongos instance.", "references": ["https://jira.mongodb.org/browse/SERVER-130431", "https://nvd.nist.gov/vuln/detail/CVE-2026-96299"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-96297", "noindex": false, "published": "2026-10-13T15:23:57.051Z", "modified": "2026-10-13T16:20:06.406Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00241, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-96297", "title": "MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline", "description": "Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory can be reused for other data before it is read, query results returned to the client may contain unrelated data from the server process. Depending on the state of memory at the time, the server process may also terminate unexpectedly. The behavior can occur when an authenticated user with read privileges runs an aggregate command that combines these two", "references": ["https://jira.mongodb.org/browse/SERVER-132946", "https://nvd.nist.gov/vuln/detail/CVE-2026-96297"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-89099", "noindex": false, "published": "2026-09-11T17:39:58.987Z", "modified": "2026-09-11T17:59:19.235Z", "cvss": 7.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00321, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-89099", "title": "Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption", "description": "A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this condition over the normal client protocol, resulting in server termination and potential corruption of process memory with user-influenced content. Successful use of this issue may impact the confidentiality, integrity, and availability of the affected server process.", "references": ["https://jira.mongodb.org/browse/SERVER-134063", "https://nvd.nist.gov/vuln/detail/CVE-2026-89099"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-88035", "noindex": false, "published": "2026-09-10T18:07:10.823Z", "modified": "2026-09-10T18:29:53.256Z", "cvss": 5.7, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00103, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-88035", "title": "Heap buffer overflow via wrapped size check during SASL username canonicalization in MongoDB C Driver", "description": "A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to terminate unexpectedly. Reaching this code requires a build in which the optional external SASL authentication backend is present and a connection configured to use it.", "references": ["https://jira.mongodb.org/browse/CDRIVER-6416", "https://nvd.nist.gov/vuln/detail/CVE-2026-88035"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82076", "noindex": false, "published": "2026-09-08T16:12:33.018Z", "modified": "2026-09-08T17:50:47.965Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00412, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82076", "title": "Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server", "description": "An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query planning, and the resulting exhaustion terminates the server process. This may result in a denial of service affecting all databases served by the affected node.", "references": ["https://jira.mongodb.org/browse/SERVER-128253", "https://nvd.nist.gov/vuln/detail/CVE-2026-82076"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82075", "noindex": false, "published": "2026-09-08T16:12:32.267Z", "modified": "2026-09-08T17:51:20.669Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00519, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82075", "title": "Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service", "description": "An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources without any rate limiting, degrading or denying service to legitimate clients. No authentication, elevated privileges, or user interaction is required. Only availability is affected; data confidentiality and integrity are not impacted.", "references": ["https://jira.mongodb.org/browse/SERVER-132650", "https://nvd.nist.gov/vuln/detail/CVE-2026-82075"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82074", "noindex": false, "published": "2026-09-08T16:12:31.425Z", "modified": "2026-09-08T17:51:37.697Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00359, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82074", "title": "Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data", "description": "MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually executed, resulting in unauthorized read access to collection data within the target database.", "references": ["https://jira.mongodb.org/browse/SERVER-132275", "https://nvd.nist.gov/vuln/detail/CVE-2026-82074"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82073", "noindex": false, "published": "2026-09-08T16:12:30.472Z", "modified": "2026-09-08T17:52:01.810Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00362, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82073", "title": "Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search", "description": "A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an internal command parameter that can be set by external clients, causing a security check to be improperly skipped.", "references": ["https://jira.mongodb.org/browse/SERVER-132125", "https://nvd.nist.gov/vuln/detail/CVE-2026-82073"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82071", "noindex": false, "published": "2026-09-08T16:12:29.752Z", "modified": "2026-09-08T18:11:15.071Z", "cvss": 7.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0054, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82071", "title": "Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write", "description": "Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.", "references": ["https://jira.mongodb.org/browse/SERVER-131860", "https://nvd.nist.gov/vuln/detail/CVE-2026-82071"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82070", "noindex": false, "published": "2026-09-08T16:12:28.947Z", "modified": "2026-09-08T17:52:34.958Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00326, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82070", "title": "Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface", "description": "A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic interface omits equivalent redaction. Successful exploitation requires a valid authenticated session with monitoring-level permissions and results in exposure of cleartext credentials that could enable impersonation of other users, including privileged accounts.", "references": ["https://jira.mongodb.org/browse/SERVER-131423", "https://nvd.nist.gov/vuln/detail/CVE-2026-82070"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82069", "noindex": false, "published": "2026-09-08T16:12:28.213Z", "modified": "2026-09-08T17:53:00.855Z", "cvss": 5.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.0041, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82069", "title": "Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router", "description": "A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypassed when processing search queries through the sharded cluster router. This results in sensitive query literals being stored and made accessible through the query statistics interface.", "references": ["https://jira.mongodb.org/browse/SERVER-132835", "https://nvd.nist.gov/vuln/detail/CVE-2026-82069"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82068", "noindex": false, "published": "2026-09-08T16:12:27.566Z", "modified": "2026-09-08T17:53:59.910Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00402, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82068", "title": "Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service", "description": "A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentially propagating to additional nodes in a sharded cluster. Manual intervention is required to restore service availability.", "references": ["https://jira.mongodb.org/browse/SERVER-131326", "https://nvd.nist.gov/vuln/detail/CVE-2026-82068"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82067", "noindex": false, "published": "2026-09-08T16:12:26.745Z", "modified": "2026-09-08T17:54:23.911Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "critical", "epss": 0.00505, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82067", "title": "Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup", "description": "Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.", "references": ["https://jira.mongodb.org/browse/SERVER-131229", "https://nvd.nist.gov/vuln/detail/CVE-2026-82067"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82066", "noindex": false, "published": "2026-09-08T16:12:26.013Z", "modified": "2026-09-08T17:55:05.594Z", "cvss": 5.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00388, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82066", "title": "Heap Out-of-Bounds Read in MongoDB Server Query Planning Component", "description": "A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.", "references": ["https://jira.mongodb.org/browse/SERVER-131562", "https://nvd.nist.gov/vuln/detail/CVE-2026-82066"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82065", "noindex": false, "published": "2026-09-08T16:12:25.265Z", "modified": "2026-09-08T17:50:16.782Z", "cvss": 7.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00402, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82065", "title": "Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata", "description": "A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable metadata, trigger a fatal assertion failure when the metadata is subsequently read by diagnostic operations. The corrupted metadata persists across server restarts and is replicated to other cluster members, requiring manual operator intervention to restore service.", "references": ["https://jira.mongodb.org/browse/SERVER-131420", "https://nvd.nist.gov/vuln/detail/CVE-2026-82065"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82064", "noindex": false, "published": "2026-09-08T16:12:24.552Z", "modified": "2026-09-08T17:58:02.243Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00519, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82064", "title": "Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members", "description": "A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about internal state do not hold for all member configurations, causing the server process to terminate.", "references": ["https://jira.mongodb.org/browse/SERVER-130759", "https://nvd.nist.gov/vuln/detail/CVE-2026-82064"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}, {"id": "CVE-2026-82063", "noindex": false, "published": "2026-09-08T16:12:23.900Z", "modified": "2026-09-08T17:58:26.114Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00367, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-82063", "title": "Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service", "description": "A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during cursor cleanup, leading to a server process crash.", "references": ["https://jira.mongodb.org/browse/SERVER-131870", "https://nvd.nist.gov/vuln/detail/CVE-2026-82063"], "fixes": [], "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}]}], "total": 149, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 8, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "mongodb", "path": "vulns/ubuntu-pro-20.04-lts/mongodb", "ecosystem": "Ubuntu:Pro:20.04:LTS"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 5, "kev": 0}, "lastmod": "2026-10-15T19:14:57.446Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}