PT-2026-63473 · Mongodb · Mongodb Server

CVE-2026-13069 · Publicado 2026-07-22 · Atualizado 2026-07-22

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an unvalidated field used to control an internal computation loop. The resulting resource exhaustion degrades availability for other operations.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2026-13069

Produtos afetados

Mongodb Server

Referências · 2

• https://jira.mongodb.org/browse/SERVER-127566 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13069 · Nota de Segurança