Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-9737

No fix known EPSS <1%CVSS 6.5

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure.

Published 2026-07-22 · CVE record · OSV

Products: mongodb_server

Distro releases

ReleasePackageFixed in
Ubuntu:Pro:14.04:LTSmongodbno fix
Ubuntu:Pro:16.04:LTSmongodbno fix
Ubuntu:Pro:18.04:LTSmongodbno fix
Ubuntu:Pro:20.04:LTSmongodbno fix