CVE-2026-9737
- Source
- https://cve.org/CVERecord?id=CVE-2026-9737
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-9737.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-9737
- Aliases
- Downstream
UBUNTU (1)
- Published
- 2026-07-22T19:20:40Z
- Modified
- 2026-10-02T03:47:35Z
- Severity
-
- 7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Find command with $meta sort can lead to crash
- Details
-
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.
- Database specific
{ "cna_assigner": "mongodb", "cwe_ids": [ "CWE-617" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9737.json", "unresolved_ranges": [ { "extracted_events": [ { "introduced": "7.0" }, { "fixed": "7.0.39" }, { "introduced": "8.0" }, { "fixed": "8.0.28" }, { "introduced": "8.2.0" }, { "fixed": "8.2.12" }, { "introduced": "8.3.0" }, { "fixed": "8.3.7" } ], "source": "AFFECTED_FIELD" } ] }- References
Affected packages
Git / github.com/mongodb/mongo
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mongodb/mongo
- Events
-
IntroducedFixedIntroducedFixedIntroducedLast AffectedIntroducedFixedIntroducedLast Affected
- Database specific
-
Show details
{ "cpe": [ "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*", "cpe:2.3:a:mongodb:mongodb:9.0.0:alpha0:*:*:-:-:*:*", "cpe:2.3:a:mongodb:mongodb:9.0.0:alpha1:*:*:-:-:*:*", "cpe:2.3:a:mongodb:mongodb:9.1.0:alpha0:*:*:-:-:*:*" ], "extracted_events": [ { "introduced": "7.0.0" }, { "fixed": "7.0.39" }, { "introduced": "8.0.0" }, { "fixed": "8.0.28" }, { "introduced": "8.2.0" }, { "last_affected": "8.2.12" }, { "introduced": "8.3.0" }, { "fixed": "8.3.7" }, { "introduced": "9.0.0-alpha0" }, { "last_affected": "9.0.0-alpha0" }, { "introduced": "9.0.0-alpha1" }, { "last_affected": "9.0.0-alpha1" }, { "introduced": "9.1.0-alpha0" }, { "last_affected": "9.1.0-alpha0" } ], "source": [ "CPE_RANGE", "CPE_STRING" ] }
Affected versions
9.*
9.0.0-alpha0
9.0.0-alpha1
9.1.0-alpha0
r7.*
r7.0.0
r7.0.1
r7.0.1-rc0
r7.0.10
r7.0.10-rc0
r7.0.11
r7.0.11-rc0
r7.0.11-rc1
r7.0.11-rc2
r7.0.12
r7.0.12-rc0
r7.0.12-rc1
r7.0.13
r7.0.13-rc0
r7.0.13-rc1
r7.0.14
r7.0.14-rc0
r7.0.15
r7.0.15-rc0
r7.0.15-rc1
r7.0.16
r7.0.16-rc0
r7.0.16-rc1
r7.0.17
r7.0.18
r7.0.2
r7.0.2-rc0
r7.0.2-rc1
r7.0.2-rc2
r7.0.21
r7.0.21-alpha0
r7.0.21-rc0
r7.0.22
r7.0.22-rc0
r7.0.23
r7.0.23-rc0
r7.0.23-rc1
r7.0.24
r7.0.24-rc0
r7.0.25-alpha0
r7.0.26
r7.0.26-rc0
r7.0.27
r7.0.27-alpha0
r7.0.27-rc0
r7.0.3
r7.0.3-rc0
r7.0.3-rc1
r7.0.35
r7.0.4
r7.0.4-rc0
r7.0.5
r7.0.5-rc0
r7.0.6
r7.0.6-rc0
r7.0.7
r7.0.7-rc0
r7.0.7-rc1
r7.0.7-rc2
r7.0.8
r7.0.8-rc0
r7.0.9
r7.0.9-rc0
r7.0.9-rc1
r8.*
r8.0.0
r8.0.1
r8.0.1-rc0
r8.0.10
r8.0.10-rc0
r8.0.12
r8.0.12-rc0
r8.0.13
r8.0.13-rc0
r8.0.13-rc1
r8.0.13-rc2
r8.0.14
r8.0.14-rc0
r8.0.14-rc1
r8.0.16
r8.0.16-rc0
r8.0.16-rc1
r8.0.17-alpha0
r8.0.2
r8.0.24
r8.0.3
r8.0.4
r8.0.4-rc0
r8.0.5
r8.0.5-rc0
r8.0.5-rc1
r8.0.5-rc2
r8.0.6
r8.2.0
r8.2.1
r8.2.1-rc0
r8.2.1-rc1
r8.2.10
r8.2.12
r8.2.2
r8.2.2-rc0
r8.2.3-alpha0
r8.2.4-alpha0
r8.2.4-alpha1
r8.3.0
r8.3.3
r9.*
r9.0.0-alpha0
r9.0.0-alpha1
r9.1.0-alpha0