CVE-2026-9740

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description A flaw in the BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The issue stems from uncontrolled mutual recursion between validation functions when handling certain nested binary data structures, which causes internal depth tracking to reset upon each re-entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.