Zurück zur CVE-Übersicht
CVE-2026-82056
MEDIUM(5.3)CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Risk Signal Score13/100 — NIEDRIG
- CVSS 5.3 — Mittel
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.3%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
5.3
Technische Schwere
Beschreibung
A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been freed, leading to a server crash. An authenticated user with readWrite privileges can trigger this condition through specific concurrent text-search and index management operations, resulting in denial of service for all connected clients. This
Betroffene Produkte
- cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
- cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
- cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*