CVE-2026-9747
No fix known EPSS <1%CVSS 6.5
Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.
Products: mongodb_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu:Pro:14.04:LTS | mongodb | no fix |
| Ubuntu:Pro:16.04:LTS | mongodb | no fix |
| Ubuntu:Pro:18.04:LTS | mongodb | no fix |
| Ubuntu:Pro:20.04:LTS | mongodb | no fix |