BIT-mongodb-2026-6914

vendorUSosv

MD5 checksum creation may cause availability loss

view advisory published 2026-05-08Licence: per source

Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 versions, all MongoDB Server v8.1 versions, MongoDB Server v8.0 versions prior to 8.0.21, MongoDB Server v7.0 versions prior to 7.0.32

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-6914US	high7.5	0.26% (17th)	—	2026-04-29
Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server. This issue affects all MongoDB Server v8.2 version…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-119981FIX
https://nvd.nist.gov/vuln/detail/CVE-2026-6914WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan