CVE-2026-82071Patch(mongodb / mongodb)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mongodb mongodb systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mongodb

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
mongodb

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-10: 1Patch / Workaround · 2026-09-10: 1Technical Details · 2026-09-10: 109-10
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-82071 (CVSS 8.1) - MongoDB Server out-of-bounds memory write flaw. Authenticated users can crash server or potentially execute code via crafted storage config. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/x4L4fBNvRb

    Post summary

    The tweet highlights a critical out-of-bounds memory write flaw in MongoDB, stresses the need for immediate patching, and provides technical details but no PoC or exploit information.

    0000043
    130 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmongodbmongodb---

Explore more