DeutschShown in its original language — a full translation is planned for a future version.
MongoDB: Mehrere Schwachstellen
view advisory published 2026-07-22
Ein Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Speicherbeschädigungen herbeizuführen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (26)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-9737US | — | — | ||
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformati… | ||||
| CVE-2026-14881US | — | — | ||
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to pr… | ||||
| CVE-2026-13078US | —OT elevated | Exploit | ||
A vulnerability was discovered in MongoDB Server where the server-side MozJS scripting engine unconditionally registered a module loading hook that enables JavaScript calls to read… | ||||
| CVE-2026-13077US | — | — | ||
A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can b… | ||||
| CVE-2026-13076US | — | — | ||
An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within M… | ||||
| CVE-2026-13075US | — | — | ||
An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The issue… | ||||
| CVE-2026-13074US | — | — | ||
An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust m… | ||||
| CVE-2026-13073US | — | — | ||
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for al… | ||||
| CVE-2026-13072US | — | — | ||
When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory co… | ||||
| CVE-2026-13071US | — | — | ||
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves… | ||||
| CVE-2026-13070US | — | — | ||
A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS handshake. OCSP stapling… | ||||
| CVE-2026-13069US | — | — | ||
An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an unval… | ||||
| CVE-2026-13068US | medium4.3OT elevated | — | ||
An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing quer… | ||||
| CVE-2026-13067US | —OT elevated | — | ||
When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This… | ||||
| CVE-2026-13066US | — | — | ||
Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data re… | ||||
| CVE-2026-13065US | — | — | ||
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod… | ||||
| CVE-2026-13064US | — | — | ||
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resourc… | ||||
| CVE-2026-13063US | medium6.5 | — | ||
An authenticated user with standard read/write privileges can cause the mongod process to terminate due to an out-of-memory condition by sending a crafted aggregation command. Mong… | ||||
| CVE-2026-13062US | — | — | ||
An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-co… | ||||
| CVE-2026-13061US | —OT elevated | — | ||
An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restrict… | ||||
showing 20 of 26
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
- GitHub Advisory Database vom 2026-07-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan