Skip to content
OpenAdvisories
High WID-SEC-2026-3236 23 CVEs

MongoDB Server: Mehrere Schwachstellen

Published Sep 8, 2026 · Updated Sep 8, 2026 · de-DE

Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MongoDB Server ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen und beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 23

  • High 8.1
    CVE-2026-82053

    Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment

    A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintend…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 8.1
    CVE-2026-82061

    Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service

    A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process c…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 8.1
    CVE-2026-82067

    Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup

    Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment wh…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 8.1
    CVE-2026-82071

    Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write

    Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bou…

    MongoDB MongoDB Server mongodb Ubuntu
  • High 7.5
    CVE-2026-82064

    Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members

    A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, …

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82052

    $regexFindAll may crash mongod server when byte-matching multi-byte UTF-8 chars

    The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server (mongod). Under certain specific conditions the  regex match can start in the middle of a multi-code-unit character, triggering…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82054

    Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

    A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on ite…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82055

    Null Pointer Dereference in MongoDB Server 2dsphere Index Key Generation Leads to Denial of Service

    A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry par…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82057

    Type Confusion in MongoDB Server WiredTiger Storage Engine via Custom Collection Configuration Leads to Persistent Denial of Service

    A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a use…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82058

    Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

    A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type con…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82065

    Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

    A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits …

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82068

    Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service

    A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repe…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82070

    Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

    A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82073

    Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

    A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue ste…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82074

    Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data

    MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a dif…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 6.5
    CVE-2026-82076

    Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server

    An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume me…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.5
    CVE-2026-82062

    Improper Authorization in MongoDB Server applyOps Command Allows Writes to Arbitrary Internal Storage Tables via Feature Gate Bypass

    A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This by…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.4
    CVE-2026-82060

    Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

    In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such doc…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.3
    CVE-2026-82056

    Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service

    A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after t…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.3
    CVE-2026-82059

    Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

    An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authent…

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 5.3
    CVE-2026-82063

    Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service

    A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and …

    MongoDB MongoDB Server mongodb Ubuntu
  • Medium 4.3
    CVE-2026-82066

    Heap Out-of-Bounds Read in MongoDB Server Query Planning Component

    A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory…

    MongoDB MongoDB Server mongodb Ubuntu
  • Low 2.7
    CVE-2026-82069

    Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router

    A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the …

    MongoDB MongoDB Server mongodb Ubuntu

Revision history

  1. #1

    Initiale Fassung

References