NetSight
medium6.5

CVE-2026-25613

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.

Impact

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.

Affected products

VendorProductAffected versions
MongodbMongodb
from 7.0.0 before 7.0.29
from 8.0.0 before 8.0.18
from 8.2.0 before 8.2.4

Weakness classification

References