Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-82066

Опубликовано: 08 сент. 2026
Источник: nvd
CVSS3: 4.3
CVSS3: 8.1
EPSS Низкий

Описание

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 7.0.0 (включая) до 7.0.41 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.0.0 (включая) до 8.0.30 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.3.0 (включая) до 8.3.9 (исключая)

EPSS

Процентиль: 33%
0.00388
Низкий

4.3 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.1
ubuntu
2 месяца назад

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

CVSS3: 8.1
debian
2 месяца назад

A heap out-of-bounds read security issue exists in the query planning ...

CVSS3: 8.1
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 8.1
redos
8 дней назад

Уязвимость mongodb-org

CVSS3: 4.3
github
2 месяца назад

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. The revealed memory contents may be partially observable through diagnostic query statistics output.

EPSS

Процентиль: 33%
0.00388
Низкий

4.3 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-125