Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-9750

Опубликовано: 09 июн. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.0.35 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.24 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.2.0 (включая) до 8.2.10 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
Версия от 8.3.0 (включая) до 8.3.3 (исключая)

EPSS

Процентиль: 29%
0.00368
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 месяцев назад

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

CVSS3: 6.5
debian
около 2 месяцев назад

An authenticated user can cause a MongoDB server to crash or return in ...

CVSS3: 6.5
github
около 2 месяцев назад

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

EPSS

Процентиль: 29%
0.00368
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-617