Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-13065

Опубликовано: 22 июл. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 7.0.0 (включая) до 7.0.39 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.0.0 (включая) до 8.0.28 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.2.0 (включая) до 8.2.12 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.3.0 (включая) до 8.3.7 (исключая)

EPSS

Процентиль: 22%
0.00297
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.

CVSS3: 6.5
debian
около 1 месяца назад

A user with read-only privileges is able to craft an aggregation pipel ...

CVSS3: 6.5
github
около 1 месяца назад

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.

EPSS

Процентиль: 22%
0.00297
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476