This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-9753 | BDVDB-2026-338772 Detail

MongoDBMongoDB Server

Description#

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-1287 Improper validation of specified type of input

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.