CVE-2026-13075
EUVD-2026-4778622.07.2026, 20:16
An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The issue originates in the server's error-handling path and requires the ability to run aggregation queries.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mongodb | mongodb | 8.2.0 ≤ 𝑥 < 8.2.12 |
| mongodb | mongodb | 8.3.0 ≤ 𝑥 < 8.3.7 |
𝑥
= Vulnerable software versions
Ubuntu Releases