CVE-2026-8843
EUVD-2026-3077718.05.2026, 17:16
Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A similar issue occurs when creating "queryable_encrypted_range" indices. This issue affects MongoDB Server v7.0 versions prior to 7.0.32, v8.0 versions prior to 8.0.21 and v8.2 versions prior to 8.2.6Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| mongodb | mongodb | 7.0 ≤ 𝑥 < 7.0.32 | CNA |
| mongodb | mongodb | 8.0 ≤ 𝑥 < 8.0.21 | CNA |
| mongodb | mongodb | 8.2 ≤ 𝑥 < 8.2.6 | CNA |
Common Weakness Enumeration
Vulnerability Media Exposure