CVE-2026-13070

Name of the Vulnerable Software and Affected Versions MongoDB (affected versions not specified)

Description A MongoDB server may terminate abnormally during the TLS handshake when initiating an outbound TLS connection if it processes a malformed OCSP response from a remote peer. OCSP stapling, a mechanism used to check the revocation status of an online certificate, is enabled by default for outgoing TLS connections. This issue occurs if the remote peer possesses a certificate issued by the cluster's trusted certificate authority or if the connection passes through an untrusted network path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.