Mongodb Server CVE-2026-6914

Out-of-bounds memory write in MongoDB Server's time-series collection feature enables arbitrary code execution by authen

MongoDB Server sharded clusters are vulnerable to use-after-free memory corruption when authenticated users with read pe

Remote unauthenticated denial-of-service in MongoDB Server's BSON validation layer allows attackers to crash the mongod

Pre-authentication denial-of-service in MongoDB Server allows unauthenticated remote clients to crash the database proce

Authenticated users can crash MongoDB Server by chaining specific server-side JavaScript operations ($_internalJsEmit or

Memory disclosure and denial-of-service in MongoDB Server allows any authenticated user with aggregate command privilege

MongoDB Server exposes an availability and data integrity risk allowing any low-privileged authenticated user to crash t

Remote denial-of-service in MongoDB Server allows an authenticated user to crash the mongod process by submitting an agg

Denial of service in MongoDB Server allows an authenticated user to crash the database process by issuing a geospatial q

Denial of service in MongoDB Server 8.0 allows authenticated users with aggregation pipeline privileges to crash the ser

Denial of service in MongoDB Server allows authenticated users to trigger an assertion failure by running aggregation pi

Denial of service in MongoDB Server allows authenticated remote attackers to crash the database process by submitting ag