Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MongoDB Server 8.3.13, 9.0.4 Clear all filters
TI-2026-71837 CVE-2026-104005 · GHSA-56w2-wpqh-pq52

Denial of service in MongoDB Server mongos via crafted pipeline

Priority LOW 31

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-10-13 Fixed in 8.3.13, 9.0.4 CWE-617
TI-2026-71816 CVE-2026-96299 · GHSA-ppm2-9qg4-qq47

Missing authorization check in MongoDB mongos enables denial of service

Priority LOW 31

A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-10-13 Fixed in 8.3.13, 9.0.4 CWE-617