CVE-2026-9740
EUVD-2026-3585709.06.2026, 23:17
A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain nested binary data structures permits uncontrolled mutual recursion between validation functions, where each re-entry resets internal depth tracking.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| mongodb | mongodb | 8.3.0 ≤ 𝑥 < 8.3.3 | CNA |
| mongodb | mongodb | 8.2.0 ≤ 𝑥 < 8.2.10 | CNA |
| mongodb | mongodb | 8.0.0 ≤ 𝑥 < 8.0.24 | CNA |
| mongodb | mongodb | 7.0.0 ≤ 𝑥 < 7.0.35 | CNA |
Common Weakness Enumeration
Vulnerability Media Exposure