CVE-2026-82064

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An unauthenticated network user can cause a denial of service on specific replica set members. The issue stems from an assertion in the read concern processing logic that can be triggered without authentication. Because the assertion's assumptions regarding internal state are invalid for certain member configurations, the server process terminates, leading to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.