Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-18688

Опубликовано: 11 авг. 2026
Источник: debian
EPSS Низкий

Описание

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
mongodbremovedpackage

EPSS

Процентиль: 34%
0.00399
Низкий

Связанные уязвимости

CVSS3: 7.1
ubuntu
3 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

CVSS3: 7.1
nvd
3 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

CVSS3: 7.1
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 7.1
redos
4 дня назад

Множественные уязвимости mongodb-org

CVSS3: 7.1
github
3 месяца назад

An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage. This could result in a server crash (denial of service) and may potentially expose a limited amount of memory contents.

EPSS

Процентиль: 34%
0.00399
Низкий