CVE-2026-82057
⚪ Do wiadomości
Błąd w MongoDB pozwala użytkownikowi z uprawnieniami do zapisu na awarię serwera.
CVSS
6.5
EPSS
0.3%
Exploit
none
Vendor
mongodb
Opis źródłowy (NVD)
A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the storage engine layer. When documents were subsequently read from the misconfigured collection, the resulting mismatch in expected data format led to corrupted memory interpretation and a server crash. The crafted collection configuration persists across restarts, requiring manual operator intervention to remediate.
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 6.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.3% |
| Opublikowano (NVD) | 2026-09-08 17:18:34 UTC |
| Ostatnia modyfikacja (NVD) | 2026-09-16 20:33:52 UTC |
Referencje
- https://jira.mongodb.org/browse/SERVER-130495 ([email protected]) [Vendor Advisory]