PT-2026-63480 · Mongodb · Mongodb Server

CVE-2026-13076 · Publicado 2026-07-22 · Atualizado 2026-07-22

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within MongoDB's aggregation framework. The behavior stems from disproportionate memory consumption during this operation, and requires both write access to the database and the ability to run aggregation queries.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2026-13076

Produtos afetados

Mongodb Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-13076 · Nota de Segurança
• https://jira.mongodb.org/browse/SERVER-128584 · Nota