Vulnerability-Lookup

WID-SEC-W-2026-0386

Vulnerability from csaf_certbund - Published: 2026-02-10 23:00 - Updated: 2026-02-10 23:00

Summary

MongoDB Server, Go Driver, Ruby Driver: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: MongoDB ist ein Open-Source-Dokumentendatenbank.

Angriff: Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Ruby-Code auszuführen, die Autorisierung zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Auswirkungen zu verursachen.

Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows

CVE-2026-1847

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-1848

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-1849

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-1850

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-25609

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-25610

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-25611

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-25612

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-25613

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB <8.0.19 Open Source / MongoDB		<8.0.19
Open Source MongoDB <8.2.5 Open Source / MongoDB		<8.2.5
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30

CVE-2026-2302

Affected products

Known affected 4 products

Product	Identifier	Version	Remediation
Open Source MongoDB Ruby Driver Mongoid <8.0.12 Open Source / MongoDB		Ruby Driver Mongoid <8.0.12
Open Source MongoDB Ruby Driver Mongoid <8.1.12 Open Source / MongoDB		Ruby Driver Mongoid <8.1.12
Open Source MongoDB Ruby Driver Mongoid <7.6.1 Open Source / MongoDB		Ruby Driver Mongoid <7.6.1
Open Source MongoDB Ruby Driver Mongoid <9.0.10 Open Source / MongoDB		Ruby Driver Mongoid <9.0.10

CVE-2026-2303

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
Open Source MongoDB Go <2.5.0 Open Source / MongoDB		Go <2.5.0
Open Source MongoDB <7.0.30 Open Source / MongoDB		<7.0.30
Open Source MongoDB Go <1.17.9 Open Source / MongoDB		Go <1.17.9

References

26 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://jira.mongodb.org/browse/GODRIVER-3770	external
https://nvd.nist.gov/vuln/detail/CVE-2026-2303	external
https://jira.mongodb.org/browse/MONGOID-5919	external
https://nvd.nist.gov/vuln/detail/CVE-2026-2302	external
https://jira.mongodb.org/browse/SERVER-102364	external
https://nvd.nist.gov/vuln/detail/CVE-2026-1849	external
https://jira.mongodb.org/browse/SERVER-112952	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25609	external
https://jira.mongodb.org/browse/SERVER-113532	external
https://nvd.nist.gov/vuln/detail/CVE-2026-1847	external
https://jira.mongodb.org/browse/SERVER-113685	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25613	external
https://jira.mongodb.org/browse/SERVER-114126	external
https://nvd.nist.gov/vuln/detail/CVE-2026-1850	external
https://jira.mongodb.org/browse/SERVER-114695	external
https://nvd.nist.gov/vuln/detail/CVE-2026-1848	external
https://jira.mongodb.org/browse/SERVER-114838	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25612	external
https://jira.mongodb.org/browse/SERVER-116210	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25611	external
https://jira.mongodb.org/browse/SERVER-99119	external
https://nvd.nist.gov/vuln/detail/CVE-2026-25610	external
https://jira.mongodb.org/browse/SERVER-115296	external
https://nvd.nist.gov/vuln/detail/CVE-2026-2303	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "MongoDB ist ein Open-Source-Dokumentendatenbank.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in MongoDB ausnutzen, um beliebigen Ruby-Code auszuf\u00fchren, die Autorisierung zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen oder nicht n\u00e4her spezifizierte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0386 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0386.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0386 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0386"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/GODRIVER-3770"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2303"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/MONGOID-5919"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2302"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-102364"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1849"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-112952"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25609"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-113532"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1847"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-113685"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25613"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-114126"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1850"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-114695"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1848"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-114838"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25612"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-116210"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25611"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-99119"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25610"
      },
      {
        "category": "external",
        "summary": "MongoDB Issue vom 2026-02-10",
        "url": "https://jira.mongodb.org/browse/SERVER-115296"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2026-02-10",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2303"
      }
    ],
    "source_lang": "en-US",
    "title": "MongoDB Server, Go Driver, Ruby Driver: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-02-10T23:00:00.000+00:00",
      "generator": {
        "date": "2026-02-11T11:07:53.000+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-0386",
      "initial_release_date": "2026-02-10T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-02-10T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c8.2.5",
                "product": {
                  "name": "Open Source MongoDB \u003c8.2.5",
                  "product_id": "T050825"
                }
              },
              {
                "category": "product_version",
                "name": "8.2.5",
                "product": {
                  "name": "Open Source MongoDB 8.2.5",
                  "product_id": "T050825-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:8.2.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.0.19",
                "product": {
                  "name": "Open Source MongoDB \u003c8.0.19",
                  "product_id": "T050826"
                }
              },
              {
                "category": "product_version",
                "name": "8.0.19",
                "product": {
                  "name": "Open Source MongoDB 8.0.19",
                  "product_id": "T050826-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:8.0.19"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.0.30",
                "product": {
                  "name": "Open Source MongoDB \u003c7.0.30",
                  "product_id": "T050827"
                }
              },
              {
                "category": "product_version",
                "name": "7.0.30",
                "product": {
                  "name": "Open Source MongoDB 7.0.30",
                  "product_id": "T050827-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:7.0.30"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Go \u003c2.5.0",
                "product": {
                  "name": "Open Source MongoDB Go \u003c2.5.0",
                  "product_id": "T050828"
                }
              },
              {
                "category": "product_version",
                "name": "Go 2.5.0",
                "product": {
                  "name": "Open Source MongoDB Go 2.5.0",
                  "product_id": "T050828-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:go__2.5.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Go \u003c1.17.9",
                "product": {
                  "name": "Open Source MongoDB Go \u003c1.17.9",
                  "product_id": "T050829"
                }
              },
              {
                "category": "product_version",
                "name": "Go 1.17.9",
                "product": {
                  "name": "Open Source MongoDB Go 1.17.9",
                  "product_id": "T050829-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:go__1.17.9"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ruby Driver Mongoid \u003c9.0.10",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid \u003c9.0.10",
                  "product_id": "T050831"
                }
              },
              {
                "category": "product_version",
                "name": "Ruby Driver Mongoid 9.0.10",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid 9.0.10",
                  "product_id": "T050831-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:ruby_driver_mongoid__9.0.10"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ruby Driver Mongoid \u003c8.1.12",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid \u003c8.1.12",
                  "product_id": "T050832"
                }
              },
              {
                "category": "product_version",
                "name": "Ruby Driver Mongoid 8.1.12",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid 8.1.12",
                  "product_id": "T050832-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:ruby_driver_mongoid__8.1.12"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ruby Driver Mongoid \u003c8.0.12",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid \u003c8.0.12",
                  "product_id": "T050833"
                }
              },
              {
                "category": "product_version",
                "name": "Ruby Driver Mongoid 8.0.12",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid 8.0.12",
                  "product_id": "T050833-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:ruby_driver_mongoid__8.0.12"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Ruby Driver Mongoid \u003c7.6.1",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid \u003c7.6.1",
                  "product_id": "T050834"
                }
              },
              {
                "category": "product_version",
                "name": "Ruby Driver Mongoid 7.6.1",
                "product": {
                  "name": "Open Source MongoDB Ruby Driver Mongoid 7.6.1",
                  "product_id": "T050834-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:mongodb:mongodb:ruby_driver_mongoid__7.6.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "MongoDB"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-1847",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-1847"
    },
    {
      "cve": "CVE-2026-1848",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-1848"
    },
    {
      "cve": "CVE-2026-1849",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-1849"
    },
    {
      "cve": "CVE-2026-1850",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-1850"
    },
    {
      "cve": "CVE-2026-25609",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-25609"
    },
    {
      "cve": "CVE-2026-25610",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-25610"
    },
    {
      "cve": "CVE-2026-25611",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-25611"
    },
    {
      "cve": "CVE-2026-25612",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-25612"
    },
    {
      "cve": "CVE-2026-25613",
      "product_status": {
        "known_affected": [
          "T050826",
          "T050825",
          "T050827"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-25613"
    },
    {
      "cve": "CVE-2026-2302",
      "product_status": {
        "known_affected": [
          "T050833",
          "T050832",
          "T050834",
          "T050831"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-2302"
    },
    {
      "cve": "CVE-2026-2303",
      "product_status": {
        "known_affected": [
          "T050828",
          "T050827",
          "T050829"
        ]
      },
      "release_date": "2026-02-10T23:00:00.000+00:00",
      "title": "CVE-2026-2303"
    }
  ]
}

CVE-2026-1847 (GCVE-0-2026-1847)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:16 – Updated: 2026-02-10 20:12

Title

MongoDB Server may crash when inserting large documents

Summary

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/SERVER-113532

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.0 , < 8.0.18 (semver) Affected: 7.0 , < 7.0.29 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1847",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T20:11:52.934322Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-10T20:12:18.968Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash."
            }
          ],
          "value": "Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:16:24.739Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-113532"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "MongoDB Server may crash when inserting large documents",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-1847",
    "datePublished": "2026-02-10T18:16:24.739Z",
    "dateReserved": "2026-02-03T18:21:50.648Z",
    "dateUpdated": "2026-02-10T20:12:18.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1848 (GCVE-0-2026-1848)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:22 – Updated: 2026-02-11 15:17

Title

Connections received from the proxy port may not count towards total accepted connections

Summary

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/SERVER-114695

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.2 , < 8.2.4 (semver) Affected: 8.0 , < 8.0.18 (semver) Affected: 7.0 , < 7.0.29 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1848",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:16:52.444535Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:17:01.970Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.2.4",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            },
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header.\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:22:41.971Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-114695"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Connections received from the proxy port may not count towards total accepted connections",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-1848",
    "datePublished": "2026-02-10T18:22:41.971Z",
    "dateReserved": "2026-02-03T18:21:51.892Z",
    "dateUpdated": "2026-02-11T15:17:01.970Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1849 (GCVE-0-2026-1849)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:52 – Updated: 2026-02-10 19:17

Title

Mongod can run out of stack memory when expressions create deeply nested documents

Summary

MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-674 - Uncontrolled Recursion

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/SERVER-102364

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.0 , < 8.0.18 (semver) Affected: 7.0 , < 7.0.29 (semver) Affected: 8.2 , < 8.2.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1849",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T19:16:27.778333Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-10T19:17:02.296Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.2",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression."
            }
          ],
          "value": "MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents. The issue arises in recursive functions because the server does not periodically check the depth of the expression."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-674",
              "description": "CWE-674 Uncontrolled Recursion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:52:52.737Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-102364"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Mongod can run out of stack memory when expressions create deeply nested documents",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-1849",
    "datePublished": "2026-02-10T18:52:52.737Z",
    "dateReserved": "2026-02-03T18:21:52.859Z",
    "dateUpdated": "2026-02-10T19:17:02.296Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1850 (GCVE-0-2026-1850)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:49 – Updated: 2026-02-10 19:18

Title

An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Summary

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/SERVER-114126

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.0 , < 8.0.18 (semver) Affected: 8.2 , < 8.2.4 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1850",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T19:18:16.858032Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-10T19:18:26.224Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.2.4",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.\u003cbr\u003e"
            }
          ],
          "value": "Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:49:32.084Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-114126"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-1850",
    "datePublished": "2026-02-10T18:49:32.084Z",
    "dateReserved": "2026-02-03T18:21:53.785Z",
    "dateUpdated": "2026-02-10T19:18:26.224Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-2302 (GCVE-0-2026-2302)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:59 – Updated: 2026-02-27 13:29

Title

Unsafe Reflection in Mongoid::Criteria.from_hash

Summary

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

183
CWE-183 - Permissive List of Allowed Inputs

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/MONGOID-5919

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Ruby Driver	Affected: 7.0.0 , ≤ 7.6.1 (semver) Affected: 8.0.0 , ≤ 8.0.12 (semver) Affected: 8.1.0 , ≤ 8.1.12 (semver) Affected: 9.0.0 , ≤ 9.0.10 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2302",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T19:09:37.837399Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-183",
                "description": "CWE-183 Permissive List of Allowed Inputs",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-27T13:29:42.348Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Ruby Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThanOrEqual": "7.6.1",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.12",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.12",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.0.10",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.\u003cbr\u003e"
            }
          ],
          "value": "Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "183",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:59:23.760Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/MONGOID-5919"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Unsafe Reflection in Mongoid::Criteria.from_hash",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-2302",
    "datePublished": "2026-02-10T18:59:23.760Z",
    "dateReserved": "2026-02-10T18:55:25.485Z",
    "dateUpdated": "2026-02-27T13:29:42.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-2303 (GCVE-0-2026-2303)

Vulnerability from cvelistv5 – Published: 2026-02-10 19:03 – Updated: 2026-02-11 15:16

Title

Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak

Summary

The mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-183 - Permissive List of Allowed Inputs

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/GODRIVER-3770

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Go Driver	Affected: 1.0.0 , < 1.17.7 (semver) Affected: 2.0.0 , < 2.4.2 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-2303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:16:06.075674Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:16:15.789Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Go Driver",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "1.17.7",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.4.2",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The mongo-go-driver repository\u0026nbsp;contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer.\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "The mongo-go-driver repository\u00a0contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS. The C wrapper implementation contains a heap out-of-bounds read vulnerability due to incorrect assumptions about string termination in the GSSAPI standard. Since GSSAPI buffers are not guaranteed to be null-terminated or have extra padding, this results in reading one byte past the allocated heap buffer."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-183",
              "description": "CWE-183 Permissive List of Allowed Inputs",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T19:03:06.737Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/GODRIVER-3770"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Heap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-2303",
    "datePublished": "2026-02-10T19:03:06.737Z",
    "dateReserved": "2026-02-10T18:55:27.871Z",
    "dateUpdated": "2026-02-11T15:16:15.789Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25609 (GCVE-0-2026-25609)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:39 – Updated: 2026-02-10 19:52

Title

profile command may permit unauthorized configuration

Summary

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-862 - Missing Authorization

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/SERVER-112952

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.2 , < 8.2.4 (semver) Affected: 8.0 , < 8.0.18 (semver) Affected: 7.0 , < 7.0.29 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25609",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T19:37:32.976979Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-10T19:52:07.572Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.2.4",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            },
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect validation of the profile command may result in the determination that a request altering the \u0027filter\u0027 is read-only.\u003cbr\u003e"
            }
          ],
          "value": "Incorrect validation of the profile command may result in the determination that a request altering the \u0027filter\u0027 is read-only."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:39:11.201Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-112952"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "profile command may permit unauthorized configuration",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-25609",
    "datePublished": "2026-02-10T18:39:11.201Z",
    "dateReserved": "2026-02-03T18:21:58.985Z",
    "dateUpdated": "2026-02-10T19:52:07.572Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25610 (GCVE-0-2026-25610)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:30 – Updated: 2026-02-10 20:29

Title

Invalid $geoNear index hint may cause server crash

Summary

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-617 - Reachable Assertion

Assigner

mongodb

References

1 reference

URL	Tags
https://jira.mongodb.org/browse/SERVER-99119

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.0 , < 8.0.13 (semver) Affected: 7.0 , < 7.0.29 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25610",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T20:29:38.183923Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-10T20:29:51.688Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.0.13",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.\u003cbr\u003e"
            }
          ],
          "value": "An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-617",
              "description": "CWE-617 Reachable Assertion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:30:40.756Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-99119"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Invalid $geoNear index hint may cause server crash",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-25610",
    "datePublished": "2026-02-10T18:30:40.756Z",
    "dateReserved": "2026-02-03T18:21:58.985Z",
    "dateUpdated": "2026-02-10T20:29:51.688Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25611 (GCVE-0-2026-25611)

Vulnerability from cvelistv5 – Published: 2026-02-10 17:52 – Updated: 2026-02-11 15:21

Title

Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Server

Summary

A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-405 - Asymmetric Resource Consumption (Amplification)

Assigner

mongodb

References

3 references

URL	Tags
https://jira.mongodb.org/browse/SERVER-116210
https://jira.mongodb.org/browse/SERVER-116206
https://jira.mongodb.org/browse/SERVER-116211

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.2 , < 8.2.4 (semver) Affected: 8.0 , < 8.0.18 (semver) Affected: 7.0 , < 7.0.29 (semver)

Credits

Vitaly Simonovich

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25611",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-11T15:20:57.244281Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-11T15:21:16.207Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.2.4",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            },
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Vitaly Simonovich"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server."
            }
          ],
          "value": "A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-405",
              "description": "CWE-405 Asymmetric Resource Consumption (Amplification)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T17:52:47.181Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-116210"
        },
        {
          "url": "https://jira.mongodb.org/browse/SERVER-116206"
        },
        {
          "url": "https://jira.mongodb.org/browse/SERVER-116211"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Pre-Authentication Memory Exhaustion Denial of Service in MongoDB Server",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-25611",
    "datePublished": "2026-02-10T17:52:47.181Z",
    "dateReserved": "2026-02-03T18:21:58.986Z",
    "dateUpdated": "2026-02-11T15:21:16.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-25612 (GCVE-0-2026-25612)

Vulnerability from cvelistv5 – Published: 2026-02-10 18:05 – Updated: 2026-02-10 18:59

Title

Internal ResourceId collision may affect unrelated collections

Summary

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-412 - Unrestricted Externally Accessible Lock

Assigner

mongodb

References

2 references

URL	Tags
https://jira.mongodb.org/browse/SERVER-114838
https://jira.mongodb.org/browse/SERVER-115296

Impacted products

1 product

Vendor	Product	Version
MongoDB Inc	MongoDB Server	Affected: 8.2 , < 8.2.4 (semver) Affected: 8.0 , < 8.0.18 (semver) Affected: 7.0 , < 7.0.29 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25612",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-10T18:59:20.305133Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-10T18:59:27.442Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MongoDB Server",
          "vendor": "MongoDB Inc",
          "versions": [
            {
              "lessThan": "8.2.4",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            },
            {
              "lessThan": "8.0.18",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.29",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks."
            }
          ],
          "value": "The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-412",
              "description": "CWE-412 Unrestricted Externally Accessible Lock",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-10T18:05:23.851Z",
        "orgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
        "shortName": "mongodb"
      },
      "references": [
        {
          "url": "https://jira.mongodb.org/browse/SERVER-114838"
        },
        {
          "url": "https://jira.mongodb.org/browse/SERVER-115296"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Internal ResourceId collision may affect unrelated collections",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a39b4221-9bd0-4244-95fc-f3e2e07f1deb",
    "assignerShortName": "mongodb",
    "cveId": "CVE-2026-25612",
    "datePublished": "2026-02-10T18:05:23.851Z",
    "dateReserved": "2026-02-03T18:21:58.986Z",
    "dateUpdated": "2026-02-10T18:59:27.442Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2026-0386

CVE-2026-1847 (GCVE-0-2026-1847)

CVE-2026-1848 (GCVE-0-2026-1848)

CVE-2026-1849 (GCVE-0-2026-1849)

CVE-2026-1850 (GCVE-0-2026-1850)

CVE-2026-2302 (GCVE-0-2026-2302)

CVE-2026-2303 (GCVE-0-2026-2303)

CVE-2026-25609 (GCVE-0-2026-25609)

CVE-2026-25610 (GCVE-0-2026-25610)

CVE-2026-25611 (GCVE-0-2026-25611)

CVE-2026-25612 (GCVE-0-2026-25612)

Tags

Sightings

Nomenclature