Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-18688

Опубликовано: 11 авг. 2026
Источник: debian
EPSS Низкий

Описание

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mongodbremovedpackage

EPSS

Процентиль: 21%
0.00281
Низкий

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 1 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

CVSS3: 7.1
nvd
около 1 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

CVSS3: 7.1
github
около 1 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

EPSS

Процентиль: 21%
0.00281
Низкий