CVE-2026-4148

Опубликовано: 17 мар. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

Ссылки

https://jira.mongodb.org/browse/SERVER-119319
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*

Версия от 7.0.0 (включая) до 7.0.31 (исключая)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*

Версия от 8.0.0 (включая) до 8.0.20 (исключая)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*

Версия от 8.2.0 (включая) до 8.2.6 (исключая)

cpe:2.3:a:mongodb:mongodb:8.3.0:alpha0:*:*:-:*:*:*

cpe:2.3:a:mongodb:mongodb:8.3.0:alpha1:*:*:-:*:*:*

cpe:2.3:a:mongodb:mongodb:8.3.0:alpha2:*:*:-:*:*:*

cpe:2.3:a:mongodb:mongodb:8.3.0:alpha3:*:*:-:*:*:*

cpe:2.3:a:mongodb:mongodb:8.3.0:rc1:*:*:-:*:*:*

EPSS

Процентиль: 25%

0.00323

Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-4148

CVSS3: 8.8

ubuntu

5 месяцев назад

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

CVE-2026-4148

CVSS3: 8.8

debian

5 месяцев назад

A use-after-free vulnerability can be triggered in sharded clusters by ...

GHSA-5rch-679r-cv33

CVSS3: 8.8

github

5 месяцев назад

A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.

EPSS

Процентиль: 25%

0.00323

Низкий

8.8 High

CVSS3

Дефекты

CWE-416