VulnSocial

CVE-2026-25610Disclosure(mongodb / mongodb)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mongodb mongodb systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

mongodb CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mongodb

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-02-10); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
mongodb
Products
mongodb

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-10: 2Mentions · 2026-02-12: 1Patch / Workaround · 2026-02-12: 1Technical Details · 2026-02-10: 2Technical Details · 2026-02-12: 102-1002-12
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-102
Disclosure2
2026-02-121
Patch1
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-25610 MongoDB Aggregation $geoNear Pipeline Index Hint Causing Server C... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25610 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    A new MongoDB vulnerability (CVE‑2026‑25610) involving an aggregation $geoNear pipeline index hint that can cause a server crash has been reported, but no proof of concept, exploit, or patch details are provided.

    0001059
    4.0K followersView on X
  • Nicolas Coolman@NicolasCoolman
    Patch

    🚨 Vulnérabilité Critique dans MongoDB : Crash Serveur via $geoNear (CVE-2026-25610). https://zoneantimalware.com/mongodb-correctif/

    Post summary

    The text highlights a critical MongoDB server crash vulnerability (CVE-2026-25610) triggered by $geoNear, and points to a corrective measure via a provided link.

    0000046
    84 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-25610 An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints. https://www.cve.org/CVERecord?id=CVE-2026-25610

    Post summary

    The text discloses a server crash vulnerability in MongoDB, triggered by an authorized user using $geoNear with invalid index hints.

    0000077
    56.5K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmongodbmongodb---

Explore more

Back to dashboardmongodb CVEsmongodb vulnerabilities