PT-2026-87161

CVE-2026-82068

·

Published

2026-09-08

·

Updated

2026-09-17

Description by

CVSS 4.0
7.1
High
MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)
Description An authenticated user with write privileges can trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, which leads to the server process repeatedly crashing upon restart and may propagate to other nodes within a sharded cluster. Restoring service availability requires manual intervention.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
BIT-MONGODB-2026-82068
Found an issue in the description? Have something to add? Feel free to write us 👾