CVE-2026-13071
No fix known EPSS <1%CVSS 6.5
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing.
Products: mongodb_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 14.04 LTS | mongodb | no fix |
| Ubuntu Pro 16.04 LTS | mongodb | no fix |
| Ubuntu Pro 18.04 LTS | mongodb | no fix |
| Ubuntu Pro 20.04 LTS | mongodb | no fix |