Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-25613

No fix known EPSS <1%CVSS 6.5

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compound wildcard index.

Published 2026-02-10 · CVE record · OSV

Products: MongoDB Inc. MongoDB Server

Distro releases

ReleasePackageFixed in
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix