CVE-2026-82075Patch(mongodb / mongodb)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mongodb mongodb systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources without any rate limiting, degrading or denying service to legitimate clients. No authentication, elevated privileges, or user interaction is required. Only availability is affected; data confidentiality and integrity are not impacted.

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mongodb

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
mongodb

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-10: 1Patch / Workaround · 2026-09-10: 1Technical Details · 2026-09-10: 109-10
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-82075 (CVSS 7.5) - MongoDB sharded-cluster router vulnerable to uncontrolled resource consumption. Unauthenticated attackers can cause DoS via connection-monitoring parameters. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/Z3ruSaZwFN

    Post summary

    CVE‑2026‑82075 exposes a DoS risk in MongoDB sharded‑cluster routers; immediate patching is recommended.

    0000036
    130 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmongodbmongodb---

Explore more