Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-13072

Опубликовано: 22 июл. 2026
Источник: debian
EPSS Низкий

Описание

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mongodbremovedpackage

Примечания

  • https://jira.mongodb.org/browse/SERVER-128494

EPSS

Процентиль: 35%
0.00404
Низкий

Связанные уязвимости

CVSS3: 8.1
ubuntu
4 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

CVSS3: 8.1
nvd
4 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

CVSS3: 8.1
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 8.1
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 8.1
github
4 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

EPSS

Процентиль: 35%
0.00404
Низкий