TI-2026-11106 CVE-2026-13057 · GHSA-6cv6-595x-vg7h
Improper input validation in MongoDB Server
Priority LOW 27
An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls.
Vulnerabilities
3 records
TI-2026-11107 CVE-2026-13058 · GHSA-538q-5r7v-2m59
Transaction Command Insufficient Input Validation Leading to Process Termination
Priority LOW 31
An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields.
TI-2026-11113 CVE-2026-13064 · GHSA-5f3w-w96q-cw2f
MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
Priority LOW 32
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion.