CVE-2026-97408.7HighCWE-674
MongoDB Server vulnerability
MongoDB · MongoDB Server
Not in CISA KEVVendor fix available
0.3%probability of exploitation in the next 30 days
28th percentile
050100
Higher than 28% of scored CVEs
8.7HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain nested binary data structures permits uncontrolled mutual recursion between validation functions, where each re-entry resets internal depth tracking.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Jun.
- MongoDB flaws risk unauthenticated crashes and data corruptionSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.