Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-25611

No fix known EPSS <1%CVSS 7.5

A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server.

Published 2026-02-10 · CVE record · OSV

Products: MongoDB Inc. MongoDB Server

Distro releases

ReleasePackageFixed in
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix