CVE-2026-13071— Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination
Possible ATT&CK Techniques 1AI
T1055 · Process InjectionAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MongoDB | MongoDB Server | 7.0< 7.0.39 | affected |
8.0< 8.0.28 | affected | ||
8.2.0< 8.2.12 | affected | ||
8.3.0< 8.3.7 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-13071
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination
Source: CVE Program / CVE List V5
Vulnerability Description
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MongoDB | MongoDB Server | 7.0 ~ 7.0.39 | - |
II. Public POCs for CVE-2026-13071
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-13071
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-13071 (1)
Same Patch Batch · MongoDB · 2026-07-22 · 26 CVEs total
| CVE-2026-13059 | 8.1 HIGH | Improper Validation of Client-Supplied Command Parameters Allowing Role-Based Access Contr |
| CVE-2026-13072 | 8.1 HIGH | MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memo |
| CVE-2026-14881 | 7.8 HIGH | Compass connection import allows to override OIDC browser open command (usually set throug |
| CVE-2026-13078 | 7.7 HIGH | Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader |
| CVE-2026-13077 | 7.1 HIGH | Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data |
| CVE-2026-13058 | 7.1 HIGH | Transaction Command Insufficient Input Validation Leading to Process Termination |
| CVE-2026-13055 | 6.5 MEDIUM | Server crash via aggregation pipeline expression with compound wildcard index specificatio |
| CVE-2026-13069 | 6.5 MEDIUM | Queryable Encryption FLE2 Find Payload Missing Input Validation Leading to Resource Exhaus |
| CVE-2026-13062 | 6.5 MEDIUM | MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption Write Command |
| CVE-2026-13060 | 6.5 MEDIUM | $graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Unauthorized Col |
| CVE-2026-13066 | 6.5 MEDIUM | Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure |
| CVE-2026-13075 | 6.5 MEDIUM | $rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggestion Generatio |
| CVE-2026-13065 | 6.5 MEDIUM | MongoDB $linearFill Window Function Improper Input Validation Leading to Process Terminati |
| CVE-2026-9737 | 6.5 MEDIUM | Find command with $meta sort can lead to crash |
| CVE-2026-13064 | 6.5 MEDIUM | MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service |
| CVE-2026-13076 | 6.5 MEDIUM | Aggregation Framework Memory Exhaustion Leading to Process Termination |
| CVE-2026-13056 | 6.5 MEDIUM | A user with read access can cause a DoS by executing a specifically crafted query to consu |
| CVE-2026-13067 | 6.3 MEDIUM | tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket |
| CVE-2026-13070 | 5.3 MEDIUM | Improper Validation of OCSP Response During Outbound TLS Handshake Leading to Process Term |
| CVE-2026-13074 | 5.3 MEDIUM | Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Ser |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: MongoDB Server
- CVE-2026-13055
Server crash via aggregation pipeline expression with compou - CVE-2026-13056
A user with read access can cause a DoS by executing a speci - CVE-2026-13057
Authorization Bypass via Client-Supplied $search.mergingPipe - CVE-2026-13058
Transaction Command Insufficient Input Validation Leading to - CVE-2026-13059
Improper Validation of Client-Supplied Command Parameters Al
Same vendor: MongoDB
- CVE-2026-14881
Compass connection import allows to override OIDC browser op - CVE-2026-13055
Server crash via aggregation pipeline expression with compou - CVE-2026-13056
A user with read access can cause a DoS by executing a speci - CVE-2026-13057
Authorization Bypass via Client-Supplied $search.mergingPipe - CVE-2026-13058
Transaction Command Insufficient Input Validation Leading to
Same weakness: CWE-416
- CVE-2026-16804
Chrome <150.0.7871.186 渲染器使用释放后漏洞 - CVE-2026-16806
Chrome < 150.0.7871.186 WebMCP Use-After-Free漏洞 - CVE-2026-16805
Chrome < 150.0.7871.186 存在Blink Use After Free导致任意代码执行 - CVE-2026-52863
Memory corruption could lead to crash and denial of service - CVE-2026-50046
Possible heap use-after-free in an error path when a DoT for
V. Comments for CVE-2026-13071
No comments yet