← Back to CVE search

CVE-2026-9754

MongoDB

Description

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

CVSS 6.5EPSS 0.22399999999999998%Risk 0.66
View source
Published
2026-06-09 23:17:05
Affected versions
unknown
Type
Critical software
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N