← Voltar à pesquisa de CVEs

CVE-2026-13076

MongoDB

Descrição

An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within MongoDB-s aggregation framework. The behavior stems from disproportionate memory consumption during this operation, and requires both write access to the database and the ability to run aggregation queries.

CVSS 6.5EPSS 0.23500000000000001%Risco 0.66
Ver fonte
Publicação
2026-07-22 20:16:46
Versões afetadas
unknown
Tipo
Software crítico
Última alteração
2026-07-23 16:17:13
Vetor
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H