Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-25610

No fix known EPSS <1%CVSS 6.5

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

Published 2026-02-10 · CVE record · OSV

Products: MongoDB Inc. MongoDB Server

Distro releases

ReleasePackageFixed in
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix