CVE-2026-82057

⚪ Do wiadomości

Błąd w MongoDB pozwala użytkownikowi z uprawnieniami do zapisu na awarię serwera.

CVSS
6.5
EPSS
0.3%
Exploit
none
Vendor
mongodb
Opis źródłowy (NVD)

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the storage engine layer. When documents were subsequently read from the misconfigured collection, the resulting mismatch in expected data format led to corrupted memory interpretation and a server crash. The crafted collection configuration persists across restarts, requiring manual operator intervention to remediate.

brak Brak patcha
Źródła i daty
ŹródłoWartość
NVD – CVSS6.5
CISA KEV (aktywnie wykorzystywane)Nie
FIRST EPSS (prawdopodobieństwo exploita)0.3%
Opublikowano (NVD)2026-09-08 17:18:34 UTC
Ostatnia modyfikacja (NVD)2026-09-16 20:33:52 UTC
Referencje