Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-13072

Опубликовано: 22 июл. 2026
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.0.39 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.28 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.2.0 (включая) до 8.2.12 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.3.0 (включая) до 8.3.7 (исключая)

EPSS

Процентиль: 33%
0.00404
Низкий

8.1 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

CVSS3: 8.1
debian
около 1 месяца назад

When compute mode is enabled on a standalone mongod instance, insuffic ...

CVSS3: 8.1
github
около 1 месяца назад

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.

EPSS

Процентиль: 33%
0.00404
Низкий

8.1 High

CVSS3

Дефекты

CWE-122