cyfenced.com →

[ CVE-2026-104004 · Published 13 Oct 2026 ]

Vulnerability in MongoDB Server

CVSS 6.5 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1304

    Multiple vulnerabilities in MongoDB Server Translated from French

    Multiple vulnerabilities have been discovered in MongoDB Server. They allow an attacker to cause remote arbitrary code execution and remote denial of service.

    CVE-2026-104004CVE-2026-96297CVE-2026-104005+2 more CVEs
  • BSI CERT-BundWID-SEC-2026-3924

    MongoDB: Multiple vulnerabilities Translated from German

    CVE-2026-96299CVE-2026-104004CVE-2026-103965+2 more CVEs

[ References ]References