BIT-mongodb-2026-82066

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-82066.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-mongodb-2026-82066

Aliases

CVE-2026-82066

Published

2026-09-17T11:50:56Z

Modified

2026-09-17T14:45:04Z

Summary

Heap Out-of-Bounds Read in MongoDB Server Query Planning Component

Details

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

Database specific

{
    "cpes": [
        "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*"
    ],
    "severity": "High"
}

References

Affected packages

Bitnami / mongodb

Package

Name: mongodb
Purl: pkg:bitnami/mongodb

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

7.0.0

Fixed

7.0.41

Introduced

8.0.0

Fixed

8.0.30

Introduced

8.3.0

Fixed

8.3.9

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/mongodb/BIT-mongodb-2026-82066.json"