Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-9754

No fix known EPSS <1%CVSS 6.5

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

Published 2026-06-09 · CVE record · OSV

Products: mongodb

Distro releases

ReleasePackageFixed in
Ubuntu Pro 14.04 LTSmongodbno fix
Ubuntu Pro 16.04 LTSmongodbno fix
Ubuntu Pro 18.04 LTSmongodbno fix
Ubuntu Pro 20.04 LTSmongodbno fix