CVE-2026-97507.1HighCWE-617
MongoDB Server vulnerability
MongoDB · MongoDB Server
Not in CISA KEVVendor fix available
0.4%probability of exploitation in the next 30 days
30th percentile
050100
Higher than 30% of scored CVEs
7.1HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Jun.
- MongoDB flaws risk unauthenticated crashes and data corruptionSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.