CVE-2026-82064

HIGHCVSS 7.5

Description

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about internal state do not hold for all member configurations, causing the server process to terminate.

Timeline

Published:September 8th, 2026 5:18 PM

Last modified:September 8th, 2026 7:07 PM

CVSS Scoring

CVSS v3: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-617

References & Reports

Advisories, patches, and third-party reports

https://jira.mongodb.org/browse/SERVER-130759

Source: NIST NVD · Data may lag official sources by up to one minute