PT-2026-63475

CVE-2026-13071

·

Published

2026-07-22

·

Updated

2026-08-19

Description by

CVSS 4.0
7.1
High
MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions mongod (affected versions not specified)
Description An authenticated user with read access can cause the mongod process to terminate. This occurs when specific aggregation expressions that execute server-side JavaScript are used, leading to improper memory handling during document processing.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-416: Use After Free
Related identifiers
CVE-2026-13071
BIT-MONGODB-2026-13071
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com