HIGH 7.2 NVD

CVE-2026-82071

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameter

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.

References

https://jira.mongodb.org/browse/SERVER-131860

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This high severity vulnerability with a CVSS score of 7.2 was published on 2026-09-08 via NVD.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.