BIT-mongodb-2026-18701

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-18701.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-mongodb-2026-18701
Aliases
Published
2026-09-17T11:50:04Z
Modified
2026-10-01T10:00:07Z
Summary
Type Confusion in MongoDB Query Subsystem Leads to Denial of Service
Details

An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter. This could result in a denial of service.

Database specific
{
    "cpes":  [
        "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:-:*:*"
    ],
    "severity":  "High"
}
References

Affected packages

Bitnami / mongodb

Package

Name
mongodb
Purl
pkg:bitnami/mongodb

Severity

  • 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
7.0.0
Fixed
7.0.40
Introduced
8.0.0
Fixed
8.0.29
Introduced
8.2.0
Fixed
8.3.8
Introduced
9.0.0
Fixed
9.0.2

Database specific

source
"https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-18701.json"